CompTIA
SY0-501 · Question #2
An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?
Sign in or unlock SY0-501 to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.
Submitted by helene.fr· Mar 4, 2026Endpoint Security
Question
An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?
Options
- ACapture and document necessary information to assist in the response.
- BRequest the user capture and provide a screenshot or recording of the symptoms
- CUse a remote desktop client to collect and analyze the malware m real time
- DAsk the user to back up files for later recovery
Unlock SY0-501 to see the answer
You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#incident response#malware#first response#documentation