CompTIA
CS0-003 · Question #557
A user's computer is performing slower than the day before, and unexpected windows continually open and close. The user did not install any new programs, and after the user restarted the desktop, the
Sign in or unlock CS0-003 to reveal the answer and full explanation for question #557. The question stem and answer options stay visible for context.
Submitted by carlos_mx· Mar 6, 2026Incident Response and Management
Question
A user's computer is performing slower than the day before, and unexpected windows continually open and close. The user did not install any new programs, and after the user restarted the desktop, the issue was not resolved. Which of the following incident response actions should be taken next?
Options
- ARestart in safe mode and start a virus scan.
- BDisconnect from the network and leave the PC turned on.
- CContain the device and implement a legal hold.
- DReformat and reimage the OS.
Unlock CS0-003 to see the answer
You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident response#Malware containment#Network isolation#Endpoint security