easyMultiple Choice
220-1102 Practice Question: A user complains that their computer is running…
A user complains that their computer is running very slowly, and they see frequent pop-up ads even when no browser is open. They also notice a new toolbar in their browser that they did not install. What is the most likely security issue?
⚠ Common exam trap
CompTIA often tests the distinction between adware and other malware types by presenting symptoms that seem like a Trojan or rootkit, but the presence of unsolicited pop-ups and an unwanted toolbar specifically points to adware, not credential theft or stealthy persistence.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The system is infected with adware that displays unsolicited advertisements.
The symptoms—pop-up ads without a browser open, an unwanted toolbar, and system slowdown—are classic indicators of adware. Adware is a type of potentially unwanted program (PUP) that displays intrusive advertisements, often by injecting ads into system processes or browser sessions, and can degrade performance by consuming CPU and memory resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A rootkit has hidden itself in the system's firmware.
Why it's wrong here
A rootkit conceals privileged access, typically without visible pop-ups or browser toolbars, so the user's observable symptoms contradict it. It is tempting because rootkits do slow systems, but they are chosen for stealth and persistence, not for displaying advertising.
- ✗
A worm is spreading through the network, consuming bandwidth.
Why it's wrong here
A worm propagates across networked hosts and consumes bandwidth, which would degrade other machines too, not install a browser toolbar on one. It is tempting because network-wide slowness resembles this symptom, but worms spread autonomously rather than delivering adware.
- ✓
The system is infected with adware that displays unsolicited advertisements.
Why this is correct
Adware injects unsolicited advertisements and installs browser toolbars without consent, matching the pop-ups appearing outside the browser and the unfamiliar toolbar. Its persistence and system slowdown align with the reported symptoms, distinguishing it from viruses or ransomware.
- ✗
A Trojan horse has stolen the user's banking credentials.
Why it's wrong here
Credential theft is silent; a Trojan stealing banking details produces no persistent pop-ups or unauthorised toolbar, so the visible symptoms point elsewhere. It is tempting because Trojans do arrive disguised as useful software, but this scenario describes adware behaviour rather than data exfiltration.
Go deeper
Related to this question
Learn chapter
Troubleshoot: Corrupt User Profile
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Adware
Adware is software that automatically displays or downloads unwanted advertisements, often bundled with free programs, and may track user behavior without clear consent.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 687 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.