Many of the files in a user's network folder have a new file extension and are inaccessible. After some troubleshooting, a technician discovers a text document that states the files were…

Question

Options

• ARestore the network folder from a backup.
• BPerform a System Restore on the computer.
• CUpdate the malware scanner and run a full scan.
• DDisconnect the computer from the network.

• A
  5% (2)
• B
  17% (7)
• C
  10% (4)
• D
  69% (29)

Explanation

NOTE: The listed correct answer (D) does not align with the question's goal of recovering the files. This scenario describes a ransomware attack - files have been encrypted by malware and a ransom is demanded for decryption. Disconnecting from the network (D) is the correct FIRST response to contain the spread, but it does not recover the files. To actually recover the encrypted files, the technician should restore the network folder from a clean backup (A), which is the most reliable recovery method for ransomware. Running an antivirus scan (C) removes the malware but cannot decrypt already-encrypted files. System Restore (B) addresses OS files, not user data in a network folder. For CompTIA A+ exam purposes, the answer to 'recover the files' is A (restore from backup), while D (disconnect from network) is the correct containment step.

No community discussion yet for this question.