CompTIA A+ Core 2 (220-1002) — Question 256

A user suspects a computer is infected with malware. A technician identifies the symptoms as being related to a recent spread of malware. Which of the following steps should the technician take NEXT to address the infection?

Answer options

• A. Educate the end user.
• B. Schedule scans and run updates.
• C. Disable System Restore.
• D. Remediate the infected system.

Correct answer: C

Explanation

Disabling System Restore is critical as it prevents the malware from potentially restoring itself from a restore point. While educating the user, scheduling scans, and remediating the system are important steps, they should occur after ensuring that the malware cannot reinfect the system through restore points.