CompTIA A+ Core 2 (220-1102) — Question 270

A technician successfully removed malicious software from an infected computer after running updates and scheduled scans to mitigate future risks. Which of the following should the technician do next?

Answer options

• A. Educate the end user on best practices for security.
• B. Quarantine the host in the antivirus system.
• C. Investigate how the system was infected with malware.
• D. Create a system restore point.

Correct answer: D

Explanation

Creating a system restore point is essential as it allows the technician to revert the system to a previous state in case of future issues. While educating the user, quarantining the host, and investigating the infection are all important steps, they do not provide immediate protection against future malware infections like a restore point does.