220-902 – Q322

A user has reported that when a document is being edited a pop-up appears and locks the workstation. The pop-up states that federal authorities have detected illegal copyrighted material on the workstation. The technician removes the malware and creates a restore point. Which of the following should the technician perform NEXT before closing the report?

A. Contact the local computer emergency response team
B. Quarantine the workstation for possible infections
C. Train the user on safe Internet browsing
D. Restore to an earlier state and disable System Restore

Correct Answer: C