The first step the CFO should take is to verify the VPN status. When working remotely, access to internal resources such as databases, file servers, and accounting systems typically requires a secure Virtual Private Network (VPN) connection. Without an active VPN tunnel, the application cannot reach internal database servers, resulting in connection errors.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, database connectivity issues during remote work are most commonly caused by missing or disconnected VPN sessions. Internal applications are often restricted to private IP ranges that are inaccessible over the public internet.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide highlights that VPNs are designed to extend the corporate network securely to remote users. If the VPN is disconnected, authentication to internal services will fail even if the application itself launches correctly.
The Mike Meyers / Mark Soper Lab Manual further explains that restarting the PC or updating the application does not resolve network-path issues. Returning to the office is unnecessary if secure remote access is functioning as designed.
Because the error specifically indicates an inability to connect to a database-and not a corrupted application-the most logical and efficient first troubleshooting step is to confirm that the VPN is connected and authenticated.

The correct answer is D. Smishing, which is a form of phishing attack conducted via SMS text messages.
The key indicators in this scenario are the unexpected text message and the embedded link prompting the user to reset a password. These attacks rely on urgency and fear to trick users into clicking malicious links or providing credentials.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, smishing attacks often impersonate legitimate organizations such as banks, IT departments, or service providers. The attacker claims that an account action is required, such as resetting an expired password, to prompt immediate user response.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide explains that smishing is distinct from other phishing variants based on delivery method. Vishing uses voice calls, spear phishing targets specific individuals via email, and whaling targets high-level executives. Since this attack is delivered via text message, it is classified as smishing.
The Mike Meyers / Mark Soper Lab Manual reinforces that modern attackers increasingly use SMS because users often trust text messages more than emails. This makes smishing a highly effective and common attack vector.
Because the attack uses SMS with a malicious link, smishing is the correct answer.

The correct answer is A. DLP (Data Loss Prevention), because DLP solutions are specifically designed to detect, monitor, and prevent unauthorized transmission of sensitive data outside an organization.
Information exfiltration occurs when confidential data is improperly transferred, leaked, or stolen, either intentionally or accidentally.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, DLP technologies enforce policies that restrict how data can be shared via email, cloud services, removable media, or network transfers.
DLP systems can block, quarantine, or alert administrators when sensitive data patterns-such as credit card numbers or personal identifiers-are detected leaving the organization.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide explains that DLP focuses on data protection, not user authentication or device management. While IAM controls access to resources and MDM manages mobile devices, neither directly prevents data from being exfiltrated once access is granted.
The Mike Meyers / Mark Soper Lab Manual reinforces that SAML is an authentication framework and does not monitor data movement.
Because the question specifically addresses information exfiltration, the security control designed to prevent it is Data Loss Prevention, making A the correct answer.

Comprehensive and Detailed Explanation From Exact Extract:
The first step in the IT change management process is to identify and propose the change. In this case, the technician notices a need (end-of-life network switches), so the appropriate action is toformally propose a change. This proposal would be documented and submitted for approval before any planning or implementation occurs.
According to the CompTIA A+ 220-1102 objectives under Operational Procedures (Domain 4.0), the change management process follows these typical steps:
* Submit a change request (Propose the change)
* Review and approval (Approve the change)
* Planning and scheduling (Schedule the change)
* Implementation
* Documentation and review
Therefore, proposing the change is the correct first step in accordance with standard ITIL-based change management practices.
Reference:
CompTIA A+ 220-1102 Objective 4.1: Given a scenario, implement best practices associated with documentation and support systems information management.
Study Guide Section: Change Management Process

This is part of theuser educationstep after a security incident to prevent future occurrences.
FromQuentin Docter - Complete Study Guide:
"User education and awareness is a crucial part of preventing phishing attacks. After an incident, it is vital to train users on recognizing suspicious messages." .