CompTIA A+ Core 2 (220-1002) — Question 292

A technician needs to remove malware from a Windows system. The technician has already performed research on the malware and determined it is a memory virus. Which of the following steps should the technician take NEXT?

Answer options

• A. Disable the restore points.
• B. Remediate the affected system.
• C. Educate the user.
• D. Quarantine the affected system.

Correct answer: D

Explanation

The correct step is to quarantine the affected system to prevent the malware from spreading and causing further damage. Disabling restore points, remediating, or educating the user are important steps but should follow after ensuring the system is isolated from the network to contain the threat.