CompTIA A+ Core 2 (220-1102) — Question 640

A user reports a workstation has been performing strangely after a suspicious email was opened on it earlier in the week. Which of the following should the technician perform FIRST?

Answer options

• A. Escalate the ticket to Tier 2.
• B. Run a virus scan.
• C. Utilize a Windows restore point.
• D. Reimage the computer.

Correct answer: B

Explanation

Running a virus scan is the most immediate action to take when a suspicious email has been opened, as it helps identify and eliminate any potential malware. Escalating to Tier 2, using a Windows restore point, or reimaging the computer are all actions that could be necessary later but do not address the immediate threat of malware.