A technician receives a phone call regarding ransomware that has been detected on a PC in a remote office.
Which of the following steps should the technician take FIRST?
A . Disconnect the PC from the network
B . Perform an antivirus scan
C . Run a backup and restore
D . Educate the end user
Answer: A