easyMultiple Choice
220-1102 Practice Question: That their system is running very slowly, and…
A user reports that their system is running very slowly, and they see frequent pop-up ads even when no browser is open. They also notice that their default search engine has changed without their permission. Which type of malware is most likely causing these symptoms?
⚠ Common exam trap
220-1202 often tests whether candidates can distinguish adware from viruses and rootkits by symptom — the trap is picking 'virus' because the user says the system is slow, when the defining evidence is the persistent ads and search-engine hijack.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adware
Adware is software that automatically displays or downloads advertising material, typically in the form of pop-ups, redirects, and browser modifications. The combination of persistent pop-ups outside a browser session plus an unauthorized change to the default search engine is the classic adware signature, often bundled with freeware or browser hijackers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Virus
Why it's wrong here
A computer virus is a type of malicious software that attaches itself to legitimate programs or documents and replicates, spreading from one computer to another. Its primary function is self-propagation and often includes payloads like data corruption, system crashes, or resource consumption, but it does not inherently manifest as browser pop-up advertisements or unsolicited search engine modifications.
- ✓
Adware
Why this is correct
Adware is a category of software that automatically displays or downloads advertising material, often in the form of pop-up ads, banner ads, or unsolicited new browser tabs. It frequently modifies web browser settings, such as the homepage or default search engine, to redirect users to advertiser-controlled sites. These symptoms directly align with a user reporting excessive pop-ups and altered search functionality, as adware's primary goal is to generate revenue through advertising impressions.
- ✗
Ransomware
Why it's wrong here
Ransomware is a highly destructive form of malware that encrypts a victim's files, rendering them inaccessible, and then demands a ransom payment, typically in cryptocurrency, for their decryption. Its presence is characterized by a prominent ransom note displayed on the screen, not by browser-based pop-up ads or changes to search engine settings. The user's reported symptoms are distinct from the severe data lockout and financial extortion tactics employed by ransomware.
- ✗
Rootkit
Why it's wrong here
A rootkit is a stealthy type of malicious software designed to hide its presence and the presence of other malware on a system, often by modifying operating system processes or kernel functions. Its primary objective is to maintain covert, persistent access and evade detection, not to display advertisements or alter browser configurations. While a rootkit can facilitate other malware, its inherent functionality does not directly produce user-visible symptoms like pop-up ads or search engine hijacking.
Go deeper
Related to this question
Learn chapter
Linux File System Structure
Key term
Adware
Adware is software that automatically displays or downloads unwanted advertisements, often bundled with free programs, and may track user behavior without clear consent.
Key term
Pop-up ads
Pop-up ads are unsolicited browser windows or overlays that appear automatically while browsing, often used for advertising or, maliciously, to spread malware.
About these practice questions
One of 687 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.