After containment and remediation, one of the final steps in incident response is user education. Since the root cause was a phishing attack, it is essential to educate users about identifying phishing attempts, safe browsing practices, and how to handle suspicious communications. This improves overall security posture and helps prevent future incidents.
A). Installing additional tools may be helpful but is a long-term step.
C). Flashing router firmware is not warranted unless the network hardware is known to be compromised.
D). Suggesting more advanced tools might be excessive given that the EDR successfully contained the incident.
Reference:
CompTIA A+ 220-1102 Objective 2.5: Given a scenario, detect, remove, and prevent malware using appropriate tools and methods.
Study Guide Section: Incident response and user education after a security event

BitLocker is Microsoft's full disk encryption technology built into Windows Pro and Enterprise editions. It encrypts the entire drive, protecting data if the device is lost or stolen. BitLocker can use TPM (Trusted Platform Module) and can be configured with PINs or USB keys for added security.
A). Active Directory is for centralized user and policy management in domains.
B). NTFS is the file system format and doesn ' t provide encryption by itself.
C). EFS (Encrypting File System) encrypts individual files or folders, not the entire drive.
Reference:
CompTIA A+ 220-1102 Objective 2.2: Compare and contrast security measures and encryption tools.
Study Guide Section: Encryption options - BitLocker vs. EFS

The AppData folder is located inside a user profile (for example, C:\Users\ < username > \AppData) and is hidden by default in Windows, so users often can't browse to it unless hidden items are displayed. The correct way to make the folder visible and easy to navigate is to adjust File Explorer Options (Folder Options). Mike Meyers' Lab Manual explains that the View tab in Folder Options provides Advanced settings where you can
"Show hidden files, folders, and drives" because "File Explorer hides them by default." That directly enables AppData visibility in normal navigation.
The All-in-One guide provides the same workflow: accessing File Explorer Options opens a dialog where the
"View options" include the setting to "Show hidden files, folders, and drives," and it notes hidden extensions and other view behaviors are managed here as well.
Indexing affects search performance, not visibility. Privacy and Ease of Access don't control hidden folder display. Therefore, configure File Explorer Options (B).

The correct answer is D. cp, which is a core Linux command used to copy files and directories. File management in Linux is performed primarily through command-line utilities, and cp is one of the most fundamental commands for this purpose.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, Linux administrators frequently use commands such as cp, mv, rm, and ls to manage files. The cp command allows users to copy files between directories or locations and supports options for recursive copying and permission preservation.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide highlights that Linux file management commands differ significantly from Windows equivalents. While Windows uses robocopy and xcopy, Linux relies on simpler, built-in commands like cp.
The Mike Meyers / Mark Soper Lab Manual further explains that curl is used for transferring data over network protocols, not for managing local files. Commands such as robocopy and xcopy are Windows- specific and not available in standard Linux environments.
Because the question asks specifically about managing files in Linux, and cp is a native Linux file- management command, D is the correct answer.

With integrated graphics, "VRAM" is often not dedicated memory on a discrete card-graphics may instead borrow system RAM. Quentin Docter explains this directly: if the video card is built into the motherboard, it
"likely won't have its own memory but will share system memory," meaning the total system RAM is split between the OS and video usage. Docter then answers the key "where do I change this?" question: "Shared memory is configured in the system BIOS/UEFI," and some BIOS/UEFI setups allow you to set aside a specific amount (example given: 512 MB) for video memory.
That is exactly why the machine can have plenty of DRAM yet fail a VRAM check: the BIOS/UEFI allocation for integrated graphics may be set too low. Adjusting BIOS/UEFI settings to reserve more memory for the integrated GPU is the most direct way to attempt meeting a VRAM requirement (when supported).
Device Manager and System Configuration won't change reserved video memory allocation, and "Virtual RAM" (paging) is unrelated to VRAM. Therefore, BIOS options is correct.