Which of the following steps should the responder perform NEXT?

An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection.

Which of the following steps should the responder perform NEXT?
A . Capture and document necessary information to assist in the response.
B . Request the user capture and provide a screenshot or recording of the symptoms
C . Use a remote desktop client to collect and analyze the malware m real time
D . Ask the user to back up files for later recovery

Answer: A