easyMultiple ChoiceObjective-mapped
220-1202 Practice Question: That their system is running very slowly, and…
A user reports that their system is running very slowly, and they see frequent pop-up ads even when no browser is open. They also notice that their default search engine has changed without their permission. Which type of malware is most likely causing these symptoms?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adware
Adware is designed to display unwanted advertisements and can modify browser settings, causing pop-ups and search engine hijacking. Unlike a virus or worm, adware does not typically replicate itself or require a host file to spread. The symptoms described—pop-ups outside the browser and unauthorized search engine changes—are classic signs of adware infection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Virus
Why it's wrong here
A computer virus is a type of malicious software that attaches itself to legitimate programs or documents and replicates, spreading from one computer to another. Its primary function is self-propagation and often includes payloads like data corruption, system crashes, or resource consumption, but it does not inherently manifest as browser pop-up advertisements or unsolicited search engine modifications.
- ✓
Adware
Why this is correct
Adware is a category of software that automatically displays or downloads advertising material, often in the form of pop-up ads, banner ads, or unsolicited new browser tabs. It frequently modifies web browser settings, such as the homepage or default search engine, to redirect users to advertiser-controlled sites. These symptoms directly align with a user reporting excessive pop-ups and altered search functionality, as adware's primary goal is to generate revenue through advertising impressions.
- ✗
Ransomware
Why it's wrong here
Ransomware is a highly destructive form of malware that encrypts a victim's files, rendering them inaccessible, and then demands a ransom payment, typically in cryptocurrency, for their decryption. Its presence is characterized by a prominent ransom note displayed on the screen, not by browser-based pop-up ads or changes to search engine settings. The user's reported symptoms are distinct from the severe data lockout and financial extortion tactics employed by ransomware.
- ✗
Rootkit
Why it's wrong here
A rootkit is a stealthy type of malicious software designed to hide its presence and the presence of other malware on a system, often by modifying operating system processes or kernel functions. Its primary objective is to maintain covert, persistent access and evade detection, not to display advertisements or alter browser configurations. While a rootkit can facilitate other malware, its inherent functionality does not directly produce user-visible symptoms like pop-up ads or search engine hijacking.
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.