Which of the following should the technician do NEXT?

A user calls the help desk to report potential malware on a computer. The anomalous activity began after the user clicked a link to a free gift card in a recent email The technician asks the user to describe any unusual activity, such as slow performance, excessive pop-ups, and browser redirections.

Which of the following should the technician do NEXT?
A . Advise the user to run a complete system scan using the OS anti-malware application
B . Guide the user to reboot the machine into safe mode and verify whether the anomalous activities are still present
C . Have the user check for recently installed applications and outline those installed since the link in the email was clicked
D . Instruct the user to disconnect the Ethernet connection to the corporate network.

Answer: D

Explanation:

First thing you want to do is quarantine/disconnect the affected system from the network so whatever malicious software doesn’t spread.