CompTIA A+ Core 2 (220-1002) — Question 228

A technician is remediating a virus on an infected workstation. All user files are set to system and hidden.
Which of the following should a technician perform NEXT to remediate the system?

Answer options

• A. Back up user data and rebuild the user profile.
• B. Restore user data and reset the user file attributes via a command line.
• C. Run System Restore to a date before the infection.
• D. Perform a clean install of the OS and restore the user data.
• E. Reset all file attributes on the user's profile via command line.

Correct answer: C

Explanation

Running System Restore to a date before the infection is effective because it can revert the system to a clean state without affecting user data. Options A and D involve more complex processes that may not be necessary if a restore point exists. Option B and E focus on restoring attributes but do not address the root cause of the infection.