FirstTry

Objective 2.4

220-1202

Summarize types of malware and tools/methods for detection, removal, and prevention.

Objective 2.4 sits in Security, which carries 28% of the A+ Core 2 exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-4Security

Which capability does Microsoft Defender Antivirus use to catch malware that does not match any predefined pattern, such as fileless attacks that exploit legitimate processes?

IPsec authentication used to verify inbound network connectionsIPsec authentication is a Windows Firewall feature for verifying connecting devices, not a malware detection method.
Static signature-based matching against known malware definitionsSignature-based matching was the older static model Defender moved away from in 2015; it cannot catch unknown patterns.
Network Location Awareness profile assignment for the deviceNetwork Location Awareness assigns firewall profiles based on network type; it does not detect malware behavior.
Anomaly detection based on process creation and download eventsCorrect · your answerCorrect: this is the feature explicitly described for catching malware with no predefined pattern.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Modern antivirus engines supplement signature matching with behavior-based detection to catch malware that has no known file signature.

Why D

Anomaly detection monitors process creation events and internet downloads, letting Defender Antivirus flag malware that doesn't fit a predefined pattern, including fileless attacks.

Source

Microsoft Defender Antivirus provides anomaly detection, a layer of protection for malware that doesn't fit any predefined pattern. Anomaly detection monitors for process creation events or files that are downloaded from the internet.

Microsoft Learn: Microsoft Defender Antivirus, checked July 2026
#malware#antivirus#anomaly-detection#defender

Now you: objective 2.4 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-4Security

A traveler connects a laptop to open Wi-Fi at a hotel lobby. To reduce exposure to malware attempting unsolicited inbound connections, which Windows Firewall network profile is applied automatically?

Sample question 2 of 3

2-4Security

A technician disables Windows Firewall on a laptop so a peer-to-peer file-sharing tool works without configuring exceptions. Beyond losing basic traffic filtering, which specific security benefit is lost as a direct result?

Sample question 3 of 3

2-4SecurityChoose 2

A technician runs the default on-demand scan on an infected workstation. Which two locations does that quick scan examine for malware set to start with the system? (Choose two.)

Full A+ Core 2 question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security