A workstation is displaying a message indicating that a user must exchange cryptocurrency for a decryption key. Which of the following is the best way for a technician to return the device to…

Running an AV scan might detect some ransomware variants, but it is not guaranteed to decrypt files or fully remove all traces of the infection, which can hide or persist.

Reinstalling the operating system completely wipes the compromised disk, guaranteeing the removal of the ransomware and any other malicious files. After reinstallation, data should be restored from known-good backups to fully recover the system securely.

Installing a software firewall will not remove existing ransomware encryption or eliminate the infection from the system; it is a preventative measure, not a remediation for an active attack.

Performing a system restore might revert some system files, but ransomware often encrypts user data files and can embed itself in ways that a simple system restore may not fully reverse, leaving residual risks.

Complying with ransomware demands by paying the ransom is strongly discouraged as it does not guarantee file decryption, funds criminal activity, and marks the victim as a potential target for future attacks.