CompTIA A+ Core 2 (220-1102) — Question 347

After a security event, a technician removes malware from an affected laptop and disconnects the laptop from the network. Which of the following should the technician do to prevent the operating system from automatically returning to an infected state?

Answer options

Correct answer: B

Explanation

Disabling System Restore prevents the operating system from restoring to a previous state that might still contain malware. Enabling System Restore (A) would allow the OS to revert back to an infected state, while enabling antivirus (C) is a good practice but does not directly stop the restore function. Educating the user (E) is important, but it does not address the immediate technical concern.