If a computer appears to be infected, which step should you take first?

Boost your cybersecurity skills with our NOCTI Cybersecurity Standard Certification Quiz. Explore detailed questions and explanations to enhance your preparation and succeed on your certification exam!

Multiple Choice

If a computer appears to be infected, which step should you take first?

Explanation:
Scanning with an up-to-date antivirus is the first step because it uses the latest malware definitions to detect and identify what’s on the system, and it can quarantine or remove the infection safely. A restart might hide symptoms temporarily or allow some malware to run again on boot, but it doesn’t reliably detect or remove threats. Deleting a user profile is drastic and risks data loss, while installing an unrelated app could introduce new risks or do nothing to eliminate the malware. Starting with a current antivirus scan gives you a clear, safe basis for what to remove or repair next.

Scanning with an up-to-date antivirus is the first step because it uses the latest malware definitions to detect and identify what’s on the system, and it can quarantine or remove the infection safely. A restart might hide symptoms temporarily or allow some malware to run again on boot, but it doesn’t reliably detect or remove threats. Deleting a user profile is drastic and risks data loss, while installing an unrelated app could introduce new risks or do nothing to eliminate the malware. Starting with a current antivirus scan gives you a clear, safe basis for what to remove or repair next.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy