100-140 Question 330
Select 3You are an IT support technician, and a user reports a pop-up on their workstation prompting them to download a software update from an unfamiliar source. What should you do to address the situation appropriately?
- A
Advise the user to immediately download and install the update to ensure their system is secure.
- B
Instruct the user to close the pop-up without interacting further and report it as a potential security risk.
- C
Verify the legitimacy of the update by cross-referencing the software's official website or documentation.
- D
Run a full antivirus and malware scan on the user's workstation to ensure it is not compromised.
- E
Allow the user to decide whether to trust the source and install the update if they feel confident.
Show answer and explanation
Correct answers: B, C, D
Explanation
When dealing with untrusted or unknown sources, it is crucial to prioritize security. Users should never interact with or download content from unverified sources. Instead, IT support should guide them to close suspicious prompts, verify their legitimacy through reliable channels, and perform scans to detect potential threats. This approach mitigates the risk of malware infections and other security issues.
- A. Incorrect.
This is incorrect because downloading and installing software from an untrusted or unknown source can open the system to significant security risks such as malware or ransomware.
- B. Correct.
This is correct because closing the pop-up and reporting it as a potential security risk is a safe initial response to avoid accidentally activating harmful content.
- C. Correct.
This is correct because verifying the legitimacy of the update using the official website or trusted documentation ensures that the update is genuine and not from an untrusted source.
- D. Correct.
This is correct because running a full antivirus and malware scan can detect any existing threats or vulnerabilities on the workstation, ensuring the system’s security.
- E. Incorrect.
This is incorrect because allowing the user to make decisions about security updates without proper verification can lead to mistakes and potential security breaches.