220-1102 Question 798
Single answerUnintentionally introducing malwareA small accounting office asks a technician to update PDF readers on several Windows 11 PCs. To save time, the technician downloads a "free PDF updater" from a third-party website and copies it to a USB flash drive used on multiple office computers. Later that day, several users report browser pop-ups, slow performance, and unexpected security tool warnings. Which action most likely caused the technician to unintentionally introduce malware into the environment?
- A
Using a third-party download site to obtain the updater instead of the software vendor's official site
- B
Using a USB flash drive to transfer the installer between computers
- C
Installing updates for PDF software during business hours
- D
Running the installer with local administrator credentials
Show answer and explanation
Correct answer: A
Explanation
This question focuses on a common real-world way technicians unintentionally introduce malware: downloading software, drivers, or updates from unofficial sources. In A+ Core 2, candidates are expected to recognize risky behaviors such as using unknown websites, unverified email attachments, suspicious links, and removable media without validation. The safest approach is to obtain installers and updates directly from the software publisher, Microsoft Store, managed software deployment tools, or other approved repositories. Security best practices from organizations such as CISA and NIST emphasize using trusted sources, validating software authenticity, and limiting exposure by following change-management and endpoint protection procedures. Although USB media and administrative rights can worsen spread or impact, the most likely initial cause in this scenario is the third-party download.
- A. Correct.
Correct. Downloading software from an untrusted third-party site is the most likely root cause of unintentionally introducing malware. Attackers commonly bundle adware, trojans, and potentially unwanted programs with fake or repackaged installers. Best practice is to download software only from the vendor's official website or an approved enterprise repository and to verify the source before deployment.
- B. Incorrect.
Incorrect. A USB flash drive can spread malware if it is already infected or if autorun-related abuse is involved, but the scenario points to the initial compromise occurring when the technician obtained the installer from an untrusted source. The USB drive acted as a transport mechanism, not the most likely original cause described here.
- C. Incorrect.
Incorrect. Installing updates during business hours may be inconvenient and can affect productivity, but it does not itself introduce malware. This option tests the misconception that timing of maintenance is a security issue rather than an operational concern.
- D. Incorrect.
Incorrect. Running installers with administrative privileges can increase the impact of malware if the installer is malicious, but using admin rights did not by itself introduce the malware. The more direct mistake was trusting and deploying software from an unverified source.