220-1102 Question 454
Single answerVulnerabilitiesA small business recently updated the browser on several receptionist PCs after users reported frequent pop-up ads and unexpected redirects to fake shipping websites. After the update, one PC still shows browser pop-ups claiming the system is infected, even when no browser windows are open. The technician notices a recently installed free PDF converter and several unknown startup entries. Which action should the technician take FIRST to address the most likely vulnerability being exploited?
- A
Uninstall the suspicious application and disable/remove the unknown startup entries, then run updated anti-malware scans
- B
Replace the PC's hard drive because pop-up ads indicate a failing storage device
- C
Disable User Account Control (UAC) so the user can remove the pop-ups without prompts
- D
Change the browser's default home page and clear cached files only
Show answer and explanation
Correct answer: A
Explanation
This scenario tests recognition of malware/adware symptoms caused by unsafe software installation practices, such as downloading freeware bundled with unwanted programs. In A+ Core 2, candidates should identify vulnerabilities created by user behavior and untrusted applications, then apply practical remediation steps. Because the pop-ups continue even when the browser is closed and unknown startup items are present, the issue is likely not just a browser misconfiguration but installed malicious or unwanted software with persistence. Best practice is to remove suspicious programs, inspect startup items, update definitions, and run anti-malware tools. This aligns with standard security guidance from Microsoft and major endpoint security vendors, which recommend removing unauthorized software and persistence mechanisms before confirming the system is clean.
- A. Correct.
Correct. The symptoms strongly suggest malware or potentially unwanted software installed through bundled freeware, which is a common vulnerability exposure on end-user systems. Unknown startup entries and pop-ups appearing without a browser open indicate software persistence outside normal browser settings. The best first step is to remove the suspicious application, disable persistence mechanisms, and perform updated anti-malware scans to remediate the infection.
- B. Incorrect.
Incorrect. A failing hard drive can cause read/write errors, slow performance, or boot issues, but it does not typically cause fake infection pop-ups or browser redirects. This distractor reflects a hardware troubleshooting assumption when the scenario points to a software security issue.
- C. Incorrect.
Incorrect. Disabling UAC would reduce system security and make it easier for unwanted software to install or persist. UAC is a security feature that helps limit unauthorized changes. Turning it off would worsen the system's exposure rather than address the vulnerability.
- D. Incorrect.
Incorrect. Clearing browser cache and resetting the home page may help if the issue is limited to browser settings, but the fact that pop-ups appear even when the browser is closed indicates a system-level persistence mechanism, such as adware or malware running at startup. This action alone would not address the root cause.