220-1102 Sample Questions & Answers

Removing the suspicious application should be the first step when dealing with mobile malware symptoms. Even though the app was downloaded from an official store, malicious applications can still slip through screening processes or become compromised after publication. The symptoms described (high data usage and security warnings) are consistent with malware behavior such as data exfiltration or unauthorized network communications. Uninstalling the app is the least invasive first step that can immediately stop the malicious activity while preserving user data and device configuration. If symptoms persist after removal, additional steps like anti-malware scans or factory reset may be necessary.

End user acceptance is the logical next step after change approval in the change management process. Once the change advisory board or steering committee approves a change request, the implementation team must validate that affected end users accept the proposed changes and understand the impact on their daily operations. This step ensures stakeholder buy-in before proceeding with implementation and helps identify any overlooked concerns or requirements. End user acceptance also includes confirming that appropriate training and communication plans are in place to support the change rollout.

Isolating the infected system is the first and most critical step in ransomware incident response. This involves immediately disconnecting the affected computer from the network to prevent the ransomware from spreading to other systems, accessing network shares, or communicating with command and control servers. Quarantine can be accomplished by unplugging network cables, disabling wireless adapters, or using network isolation tools. This containment step is essential before any remediation attempts, as it limits the scope of the infection and protects other valuable data and systems on the network. Only after proper isolation should removal and recovery procedures begin.

Remote wipe capability is the most effective security measure for protecting corporate data when mobile devices are lost or stolen. This feature allows IT administrators to remotely erase all data from a device through mobile device management (MDM) solutions, ensuring that sensitive corporate information cannot be accessed by unauthorized individuals. Remote wipe can be triggered immediately upon reporting a lost or stolen device, and it completely removes all data, applications, and settings. This is particularly important for sales representatives who may store customer information, financial data, and proprietary business information on their devices.

Blocking notifications from the specific website in browser settings is the most targeted and effective solution. Modern web browsers allow websites to request permission to send push notifications, and users can grant or deny these permissions. When unwanted promotional notifications come from a specific website, the best approach is to access the browser's notification settings and move that particular site from the 'Allowed' list to the 'Blocked' list. This resolves the immediate problem without affecting legitimate notifications from other sources or disabling useful browser functionality entirely. This approach maintains system functionality while eliminating the specific nuisance.