mediumMultiple Choice
220-1102 Practice Question: During a security audit, you discover that a…
During a security audit, you discover that a user's browser has multiple pop-up windows appearing, even when no websites are open. The user denies installing any software. Which tool should you use to identify and remove the underlying cause?
⚠ Common exam trap
220-1202 often tests the distinction between symptom relief (resetting browser, clearing cache) and root-cause remediation (anti-malware scan), tempting candidates to pick the quickest-sounding fix instead of the one that actually removes the infection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Run a full scan with Windows Defender or another anti-malware tool
Pop-up windows appearing with no browser open is a classic symptom of adware, a browser hijacker, or a malicious browser extension — all of which are forms of malware. A full anti-malware scan with Windows Defender or a comparable tool is the correct action because it detects and removes the underlying malicious program rather than just masking its symptoms. Browser-level fixes only address surface behavior and will not remove the persistent infection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reset the browser settings to default
Why it's wrong here
Resetting browser settings to default primarily reverts user-configured preferences, homepages, and search engine defaults. However, adware often installs itself as a separate application, a persistent browser extension, or a system service that operates independently of these browser settings. Therefore, a browser reset alone is insufficient to remove the underlying adware program that continues to generate unwanted pop-ups.
- ✓
Run a full scan with Windows Defender or another anti-malware tool
Why this is correct
Running a full scan with Windows Defender or another reputable anti-malware tool is the most effective solution because these tools are specifically designed to detect, quarantine, and remove malicious software, including adware and Potentially Unwanted Programs (PUPs). They scan the entire file system, registry, and running processes for known signatures and behavioral patterns associated with such threats, providing comprehensive remediation. This directly addresses the root cause of the pop-ups by eliminating the adware.
- ✗
Disable JavaScript in the browser
Why it's wrong here
Disabling JavaScript in the browser may prevent some pop-ups that rely on client-side scripting to appear, but it does not remove the adware itself. Many adware programs inject content or open new browser windows/tabs through other mechanisms, or even run as background processes on the operating system. Furthermore, disabling JavaScript severely impairs the functionality of many legitimate websites, making it an impractical and incomplete solution for adware removal.
- ✗
Clear the browser cache and cookies
Why it's wrong here
Clearing the browser cache and cookies removes temporary website data and stored user preferences, which can help with privacy or resolve website display issues. However, adware is typically installed as a program on the operating system or as a persistent browser extension, not merely stored data within the browser's cache or cookies. Therefore, deleting these temporary files will not remove the executable components of the adware responsible for generating unwanted pop-ups.
Go deeper
Related to this question
Learn chapter
SOHO Network Security
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
Key term
Adware
Adware is software that automatically displays or downloads unwanted advertisements, often bundled with free programs, and may track user behavior without clear consent.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 687 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.