CompTIA A+ Core 2 (220-1102) — Question 389

A user reports that an air-gapped computer may have been infected with a virus after the user transferred files from a USB drive. The technician runs a computer scan with Windows Defender but does not find an infection. Which of the following actions should the technician take next? (Choose two.)

Answer options

• A. Examine the event logs
• B. Connect to the network
• C. Document the findings
• D. Update the definitions
• E. Reimage the computer
• F. Enable the firewall

Correct answer: A, D

Explanation

Examining the event logs (A) can reveal unusual activities or errors related to file transfers that could indicate a compromise. Updating the definitions (D) ensures that the latest virus definitions are being used for future scans, which increases the chance of detecting any potential threats that may not have been recognized with outdated definitions.