Câu 86: SY0-501: CompTIA Security+

An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?

1. A. Capture and document necessary information to assist in the response. — đáp án hiện tại
2. B. Request the user capture and provide a screenshot or recording of the symptoms.
3. C. Use a remote desktop client to collect and analyze the malware in real time.
4. D. Ask the user to back up files for later recovery.