CompTIA A+ Core 2 (220-1102) — Question 661

A user calls the help desk to report potential malware on a computer. The anomalous activity began after the user clicked a link to a free gift card in a recent email.
The technician asks the user to describe any unusual activity, such as slow performance, excessive pop-ups, and browser redirections. Which of the following should the technician do NEXT?

Answer options

• A. Advise the user to run a complete system scan using the OS anti-malware application.
• B. Guide the user to reboot the machine into safe mode and verify whether the anomalous activities are still present.
• C. Have the user check for recently installed applications and outline those installed since the link in the email was clicked.
• D. Instruct the user to disconnect the Ethernet connection to the corporate network.

Correct answer: D

Explanation

The correct answer is D because disconnecting the Ethernet connection helps prevent the potential spread of malware to the corporate network. While options A, B, and C are valid steps for handling malware, they do not immediately address the risk of further infection or data compromise on the network.