A user's computer is infected with ransomware. The user has important files that are not backed up. What is the best course of action?

Reboot the computer to clear the ransomware.

Disconnect the computer from the network and report the incident to the security team.

Run a malware scan to remove the ransomware and restore the files.

Pay the ransom to get the files back quickly.

A user suspects their computer is infected with malware because they see unexpected pop-ups and the browser homepage has changed. The user has security software installed but has not updated it in several months. What should the user do first?

Update the security software's virus definitions, then run a full system scan.

Reset the browser homepage and ignore the pop-ups, since they are likely just advertisements.

Run a quick scan immediately without updating definitions, since the scan will still catch most threats.

Uninstall the security software and reinstall it, then continue using the computer normally.

A user reports that they clicked a link in a phishing email and entered their password. They immediately realized the mistake. What is the most important immediate action?

Report the incident to the security team after changing the password.

Run a malware scan to check for infections.

Disconnect the computer from the network.

Change the password for that account and any other accounts using the same password.

CiscoCertified Support Technician (CCST) IT Support

Domain 5Objective 1

5.1. Describe Security Threats to the End User, Perform Basic Investigation, and Escalate to the Appropriate Team. 100-140 Practice Questions (Page 6)

Part of the Common Threats and Preventions domain, which makes up ~12% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 26–30

26expert · hard
A user's computer is infected with ransomware. The user has important files that are not backed up. What is the best course of action?
Select an answer first
27application · medium
A user suspects their computer is infected with malware because they see unexpected pop-ups and the browser homepage has changed. The user has security software installed but has not updated it in several months. What should the user do first?
Select an answer first
28expert · hard
A user reports that they clicked a link in a phishing email and entered their password. They immediately realized the mistake. What is the most important immediate action?
Select an answer first
29application · medium
A user wants to create a strong password for their corporate account. Which password best meets the criteria of length, complexity, and uniqueness?
Select an answer first
30foundation · easy
A user's files have been encrypted, and a message demands payment in cryptocurrency to restore access. Which type of malware is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-140” is a trademark of its owner, used for identification only.

5.1. Describe Security Threats to the End User, Perform Basic Investigation, and Escalate to the Appropriate Team. 100-140 Practice Questions (Page 6)

Questions 26–30

A user's computer is infected with ransomware. The user has important files that are not backed up. What is the best course of action?

A user suspects their computer is infected with malware because they see unexpected pop-ups and the browser homepage has changed. The user has security software installed but has not updated it in several months. What should the user do first?

A user reports that they clicked a link in a phishing email and entered their password. They immediately realized the mistake. What is the most important immediate action?

A user wants to create a strong password for their corporate account. Which password best meets the criteria of length, complexity, and uniqueness?

A user's files have been encrypted, and a message demands payment in cryptocurrency to restore access. Which type of malware is this?

Keep studying — Common Threats and Preventions