During a workshop assessment, the reported condition is: An endpoint displays pop-ups, launches unknown processes, and contacts suspicious domains. What is the appropriate first response?
Answers
Afollow the malware-response process, contain the endpoint, preserve evidence, and protect accounts
Bemail the unknown files to coworkers
Cerase every log before escalation
Ddisable security tools and continue normal use
The answer and explanation are in the full bank.
This question is one of 2,831 in the paid banks. Each comes with the correct answer and the reasoning behind it, not just a mark.
Unlock for 5,000 RWFMIFOTRA exam practicealigned to CompTIA A+ 220-1201/1202·3 marks·Medium
More CompTIA Core questions
- A PC builder is installing a new Intel processor. The motherboard specifies an LGA1700 socket. Which of the following is true?
- A user wants to add more RAM to their laptop. The existing stick is labeled "PC4-25600". What type of memory should the user purchase?
- A customer is buying a cheap tablet for basic web browsing. The specs list the storage as 64GB but do not mention SSD or HDD. What type of storage is MOST likely used?
- A system administrator needs to run three Windows Server virtual machines on a dedicated bare-metal server. Which type of hypervisor should be installed?
- A student wants to run Linux inside a window on their Windows 10 desktop to learn command line basics. What type of hypervisor is required?
- A developer is writing code for a new app and using a cloud provider to host the execution environment, runtime, and databases without managing the underlying servers. What cloud model is this?
- A hospital needs to utilize cloud computing for off-site backups but must adhere to strict data privacy regulations, ensuring they do not share hardware with other companies. What deployment model should they use?
- A gamer has purchased a high-end graphics card. Upon installation, they notice the card requires two 8-pin power connectors. Which component must supply these connectors?