Exam 220-1202 Topic 1 Question 143 Discussion
Actual exam question for CompTIA's 220-1202 exam
Question #: 143
Topic #: 1
Question #: 143
Topic #: 1
A user reports the icons on their desktop have changed. A technician investigates and discovers programs no longer open, files are inaccessible, and file extensions have been changed. When a ransom note appears on the display, which of the following should the technician do next?
Suggested Answer: D Vote an answer
The technician should isolate the system immediately to prevent the ransomware from spreading to other machines or network resources before taking any recovery actions.
by Saxon at May 25, 2026, 07:13 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).