220-1102 Practice Question: A user complains that their Windows 10 computer…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Windows Defender Firewall

  Why it's wrong here

  Windows Defender Firewall operates as a network security component, inspecting incoming and outgoing network traffic based on predefined rules to prevent unauthorized access or malicious network activity. While crucial for blocking network-based threats and preventing new infections from entering the system, it lacks the capability to scan for, detect, or remove malware that has already successfully infiltrated the operating system. Its function is purely preventative network control, not post-infection remediation.

• ✓

  Windows Defender Offline Scan

  Why this is correct

  Windows Defender Offline Scan is a specialized security feature designed to run outside the active Windows operating system environment, typically from a bootable recovery partition or USB drive. This isolation allows it to detect and remove deeply embedded or persistent malware, such as rootkits or boot sector viruses, that might evade detection by standard antivirus scans running within a compromised OS. By operating in a clean state, it prevents malware from actively interfering with the scanning and removal process, making it highly effective for stubborn infections.

• ✗

  System Restore

  Why it's wrong here

  System Restore is a Windows utility that allows users to revert critical system files, registry settings, and installed programs to a previous state, known as a restore point. While it can sometimes undo changes made by malware to system configurations, it does not scan for or remove malware executables or data files from user profiles or other non-system locations. Furthermore, some sophisticated malware can persist across restore points or reinfect the system immediately after a restore, rendering it ineffective as a primary malware removal tool.

• ✗

  User Account Control (UAC)

  Why it's wrong here

  User Account Control (UAC) is a security feature in Windows that prompts users for administrative consent before allowing applications to make changes that require elevated privileges. Its primary purpose is to prevent unauthorized modifications to the operating system by malicious software or accidental user actions, thereby limiting the potential damage an application can inflict. However, UAC is a preventative measure against privilege escalation and does not possess any capabilities to scan for, detect, or actively remove malware that has already established itself on the system.

Go deeper

Related to this question