While browsing the Internet, a customer sees a window stating antivirus protection is no longer functioning. Which of the following steps should a technician take next? (Choose two.)

Isolating the computer from the network is the critical first step when there's an indication of malware or a security breach (like antivirus failing). This prevents potential malware from spreading to other systems on the network or exfiltrating data, containing the threat to the compromised machine.

Enabling the firewall service is a good security practice but might be insufficient if malware has already bypassed or disabled it, and it doesn't address the core issue of failed antivirus or a potential infection.

Updating the endpoint protection software (antivirus) ensures that it has the latest definitions and patches to effectively detect and remove existing or new threats. After isolation, this is necessary to remediate the infection and restore security.

Using System Restore might revert system changes but may not remove all traces of malware, and it could potentially reintroduce vulnerabilities or leave the system in a less secure state if the restore point predates necessary security updates.

Deleting browser cookies primarily addresses privacy and browsing history, and is not a direct action for resolving a failing antivirus or active malware infection.

Running sfc /scannow checks for and repairs corrupted Windows system files but does not directly address malware removal or updating security software definitions.