CompTIA A+ Core 2 (220-1102) — Question 280

A technician sees a file that is requesting payment to a cryptocurrency address. Which of the following should the technician do first?

Answer options

• A. Quarantine the computer.
• B. Disable System Restore.
• C. Update the antivirus software definitions.
• D. Boot to safe mode.

Correct answer: A

Explanation

The technician should first quarantine the computer to prevent the potential malware from spreading or causing further damage. Disabling System Restore, updating antivirus definitions, or booting to safe mode may be necessary steps afterward, but immediate isolation is crucial to contain the threat.