A technician receives a phone call regarding ransomware that has been detected on a PC in a remote office. Which of the following steps should the technician take FIRST? 

Answer options:

A. Disconnect the PC from the network
B. Perform an antivirus scan
C. Run a backup and restore
D. Educate the end user

A