CompTIA Network+ (N10-009) N10-009 — Question 329

A company has been added to an unapproved list because of spam. The network administrator confirmed that a workstation was infected by malware. Which of the following processes did the administrator use to identify the root cause?