A user reports that their computer is displaying a message demanding payment in Bitcoin to unlock their files. The files have a .encrypted extension. Which type of malware is this, and what is the FIRST step you should take?

Ransomware; disconnect the computer from the network immediately.

Trojan; pay the ransom to regain access.

Adware; restart the computer in Safe Mode.

Spyware; run a full antivirus scan.

A technician has identified malware on a Windows workstation. Which of the following is the FIRST step in the malware removal process?

Disconnect the system from the network

A user reports that their computer is infected with a virus that keeps reappearing after removal. The virus appears to be a file infector that modifies executable files. Which security software tool should be used to ensure the virus is completely removed?

Use Task Manager to end the virus process.

Use a boot-time scan with the antivirus software.

Use Disk Cleanup to remove temporary files.

Use System Restore to revert to a previous point.

A system administrator notices that a user account has been locked out multiple times in the past hour, and the user claims they were not trying to log in. Which sign of unauthorized access does this indicate?

The user is typing their password incorrectly.

The account is infected with malware.

The user's password has expired.

A brute-force attack is being attempted against the account.

CompTIAA+ Core 2

Domain 3Objective 3

Security Concerns 220-1202 Practice Questions (Page 3)

Part of the Software troubleshooting domain, which accounts for 23% of the 220-1202 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 3–5 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

23%of the exam

Questions 11–15

11application · medium
A user reports that their computer is displaying a message demanding payment in Bitcoin to unlock their files. The files have a .encrypted extension. Which type of malware is this, and what is the FIRST step you should take?
Select an answer first
12foundation · easy
A user's files have been encrypted and a message demands payment in cryptocurrency to restore access. Which type of malware is this?
Select an answer first
13foundation · easy
A technician has identified malware on a Windows workstation. Which of the following is the FIRST step in the malware removal process?
Select an answer first
14expert · medium
A user reports that their computer is infected with a virus that keeps reappearing after removal. The virus appears to be a file infector that modifies executable files. Which security software tool should be used to ensure the virus is completely removed?
Select an answer first
15application · medium
A system administrator notices that a user account has been locked out multiple times in the past hour, and the user claims they were not trying to log in. Which sign of unauthorized access does this indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 220-1202

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “220-1202” is a trademark of its owner, used for identification only.