Windows 10 (legacy) — Question 86

You have a Windows 11 Pro device.

You need to perform a scan in Microsoft Defender to check for rootkits.

Which type of scan should you use?

Answer options

• A. full
• B. offline
• C. custom
• D. quick

Correct answer: B

Explanation

The correct answer is B, the offline scan, which is specifically designed to detect and remove rootkits by running before Windows fully loads. Other scan types, such as full, custom, and quick, do not provide the same level of detection for rootkits, as they operate within the Windows environment where rootkits may be hidden.