CompTIA
220-1202 · Question #216
A user reports the icons on their desktop have changed. A technician investigates and discovers programs no longer open, files are inaccessible, and file extensions have been changed. When a ransom no
Sign in or unlock 220-1202 to reveal the answer and full explanation for question #216. The question stem and answer options stay visible for context.
Submitted by kev92· Mar 30, 2026Security
Question
A user reports the icons on their desktop have changed. A technician investigates and discovers programs no longer open, files are inaccessible, and file extensions have been changed. When a ransom note appears on the display, which of the following should the technician do next?
Options
- AChange the extensions back.
- BRun antivirus scans.
- CRestore from a backup.
- DIsolate the system.
Unlock 220-1202 to see the answer
You've previewed enough free 220-1202 questions. Unlock 220-1202 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Ransomware#Incident response#System isolation