单选题A user states that their work PC has become infected with a virus. Which of the following shouldthe technician do FIRST?（）A Perform an antivirus program scanB Boot the machine into Safe ModeC Remove the machine from the networkD Check for system securi

第1题：

A Windows XP system has been badly infected with malware. The technician notices that the malware is making repeated attempts to broadcast over the network from activity seen on the local firewall. Which of the following Windows XP startup options would be the SAFEST way to remove the malware?（）

• A、Use the Safe Mode with Networking option
• B、Use the Safe Mode option
• C、Use the Enable Boot Logging option
• D、Use the Last Known Good Configuration option

第2题：

A technician finished installing antivirus software. Which of the following should the technician perform NEXT?（）

• A、Run a full scan on the local disk.
• B、Remove infected files.
• C、Update antivirus signatures.
• D、Quarantine infected files

第3题：

第4题：

A technician is attempting to remove a number of viruses from an infected system. The antivirus software in use is fully updated and has detected the viruses. However, a message stating that the file is in use appears when the technician tries to quarantine or delete the infected files. Which of the following can be done to resolve this issue?（）

• A、Change the permissions on the file.
• B、End the running process.
• C、Run the antivirus scan again.
• D、Use the command line to delete the file.

第5题：

A virus has been removed from the user’s machine, but the user still cannot access the Internet.Which of the following should the technician check NEXT?（）

• A、Disable port forwarding on the router.
• B、Reboot to Safe Mode and see if the Internet is accessible.
• C、Format the machine and reinstall the OS.
• D、Check the web browser’s proxy settings.

第6题：

A technician works for a company that has recently been affected by a virus. The virus entered the network by using port 6000. Port 6000 is used by an application located on a server. The technician has been asked to block this port on all servers and computers except for the one server which uses this port. Which of the following should the technician do？（）

• A、Update the antivirus application
• B、Install critical update security patches
• C、Adjust the software firewall settings
• D、Replace the current antivirus program

第7题：

A user reports that their machine seems to be running slower than usual. The user states that the computer has become progressively worse as more applications are installed. Which of the following is the FIRST step the technician should take?（）

• A、Run the CHKDSK utility
• B、Run the disk defragmenter utility
• C、Increase the capacity on the system volume
• D、Convert to a dynamic drive on the system

第8题：

A user states that their work PC has become infected with a virus. Which of the following shouldthe technician do FIRST?（）

• A、Perform an antivirus program scan
• B、Boot the machine into Safe Mode
• C、Remove the machine from the network
• D、Check for system security patches

第9题：

A technician is cleaning spyware from a Windows XP machine. Because of the infections, the unitcannot browse the Internet to obtain anti-virus updates.Which of the following is the BEST course ofaction? （）(Select TWO).

• A、Boot into safe mode and format the drive.
• B、Install a pop-up blocker and update Internet Explorer.
• C、Boot to Safe Mode with Networking and attempt updates.
• D、Boot into safe mode and perform CHKDSK.
• E、Apply updates manually by downloading the definition files on another machine.

第10题：

A technician has a user that consistently picks up viruses and malware no matter what kind ofsoftware is installed to prevent infection. Which of the following should be a cost-effective logical step in preventing future infections?（）

• A、Place the user behind a high end NIPS device.
• B、Migrate the user to a Virtual Machine environment.
• C、Educate the user on browsing habits.
• D、Install multiple antivirus programs on the machine to decrease the chances for infection.