A technician fails to remediate ransomware on a Windows PC. The user is asking for the fastest path for the PC to become operational again. Which of the following actions should the technician take…

The correct answer is C. Reimage the system from a good backup. Reimaging the system from a known-good backup is the fastest and most reliable way to restore full functionality after ransomware when remediation attempts have failed, ensuring all malicious components are completely removed.

Submitted by hassan_iq· Mar 30, 2026Security

Question

A technician fails to remediate ransomware on a Windows PC. The user is asking for the fastest path for the PC to become operational again. Which of the following actions should the technician take next?

Options

AEducate the end user on safer browsing techniques.
BDisable System Restore capability.
CReimage the system from a good backup.
DRun optional Windows updates.

How the community answered

(54 responses)

A
33% (18)
B
15% (8)
C
43% (23)
D
9% (5)

Explanation

Reimaging the system from a known-good backup is the fastest and most reliable way to restore full functionality after ransomware when remediation attempts have failed, ensuring all malicious components are completely removed.

Topics

#Ransomware recovery#System imaging#Backup and restore

Community Discussion

No community discussion yet for this question.

Full 220-1202 Practice