CompTIA A+ Core 2 (220-1102) — Question 496

A user's PC is performing slowly after the user clicked on a suspicious email attachment. The technician notices that a single process is taking 100% of RAM, CPU, and network resources. Which of the following should the technician do first?

Answer options

• A. Disconnect the computer from the network
• B. Run an antivirus scan
• C. Reboot the computer
• D. Educate the user about cybersecurity best practices

Correct answer: A

Explanation

The correct action is to disconnect the computer from the network to prevent the potential spread of malware or data exfiltration. Running an antivirus scan or rebooting the computer may not immediately stop the ongoing threat, and educating the user, while important, does not address the immediate risk posed by the active malicious process.