CompTIA A+ Core 2 (220-1202) — Question 41

A technician verifies that a malware incident occurred on some computers in a small office. Which of the following should the technician do next?

Answer options

• A. Quarantine the infected systems.
• B. Educate the end users.
• C. Disable System Restore.
• D. Update the anti-malware and scan the computers.

Correct answer: A

Explanation

The correct next step is to quarantine the infected systems to prevent further spread of the malware. Educating end users, disabling System Restore, and updating anti-malware are important actions, but they should be taken after the immediate threat is contained.