The technician should isolate the system immediately to prevent the ransomware from spreading to other machines or network resources before taking any recovery actions.

This scenario involves a mismatch in device time settings, which can affect synchronization and authentication across the network. Using a Network Time Protocol (NTP) server ensures all networked devices maintain accurate and synchronized clocks.

Applications and Library are core system directories in macOS. The Applications folder contains installed applications. The Library folder contains support files, preferences, and other system- related files.

Running a mobile malware scan is the first step because the app installed from an advertisement could be malicious, causing excessive battery drain and overheating.

Full-disk (or device) encryption ensures that, even if a lost mobile device is physically accessed by an unauthorized party, its stored data remains inaccessible without the correct decryption credentials. This protection is automatic and continuous, safeguarding data at rest regardless of whether the user realizes the device is missing or not. Remote wipe can remove data if triggered, but it requires the device to be online and the user (or admin) to initiate the wipe--whereas encryption is always in effect.