When a user's cursor is moving on its own and unauthorized data transfer is occurring, the first step a technician should take is to Quarantine the workstation. This involves isolating the affected system from the network to prevent the spread of malware or unauthorized access to other parts of the network. Quarantining helps in containing the threat and provides a safe environment to investigate and remediate the issue without risking further contamination or data loss.

When a user's laptop shuts down every time the lid is closed, it typically means that the power settings are configured to put the laptop into a shutdown state when the lid is closed. To remediate this issue:
* Edit the power plan: This involves changing the settings for what happens when the laptop lid is closed.
* Go to Control Panel > Hardware and Sound > Power Options.
* Click on "Choose what closing the lid does."
* Change the settings for "When I close the lid" to either "Sleep" or "Do nothing" instead of "Shut down."
* Configure the sleep settings: While similar to editing the power plan, this option specifically adjusts the sleep settings rather than the overall power plan settings.
* Disable hibernation: This is a less direct solution but could be considered if the laptop was set to hibernate and then experiencing issues.
* Turn on fast startup: This setting affects how quickly the computer starts up from a shutdown, but it does not directly address the issue of what happens when the lid is closed.
Reference:
CompTIA A+ 220-1102 Exam Objectives, Section 1.5: Given a scenario, use the appropriate Microsoft Windows settings.
Windows power management documentation.

When an Android device experiences slow boot times and application crashes after installing apps from a third-party website, scanning the system for malware is a critical first step. Third-party sources can often host malicious software that can compromise device performance and security. A malware scan can identify and remove such threats, potentially resolving the performance issues and application instability. Clearing the web browser cache, enrolling the device in an MDM system, and confirming app compatibility are useful steps but do not address the immediate concern of potential malware introduced by third-party app installations.

SQL injection is a type of attack that takes advantage of vulnerabilities in a web application's database query software, allowing an attacker to send malicious SQL commands through the application to the database.
These commands can manipulate the database and can lead to unauthorized data access or manipulation.
SQL injection:In the scenario described, the malicious user was able to export an entire website's user database by entering specific commands into a field on the company's website, which is a classic example of an SQL injection attack. This type of attack exploits vulnerabilities in the database layer of an application to execute unauthorized SQL commands.
Cross-site scripting (A) involves injecting malicious scripts into content from otherwise trusted websites. A brute-force attack (C) is an attempt to gain access to a system by systematically checking all possible keys or passwords until the correct one is found. A DDoS attack (D) is an attempt to make a machine or network resource unavailable to its intended users by overwhelming it with a flood of internet traffic.

Verifying warranty status with the vendor is the most logical next step in the remediation process after determining that a motherboard has failed. A warranty is a guarantee from the vendor that covers the repair or replacement of defective or faulty products within a specified period of time. Verifying warranty status with the vendor can help the technician determine if the motherboard is eligible for warranty service and what steps to take to obtain it. Escalating the issue to Tier 2, replacing the motherboard, and purchasing another PC are not the most logical next steps in the remediation process.