A user reports that their workstation has become progressively slower over the past two weeks, occasionally freezing when opening large files, and you hear a faint repetitive clicking sound from inside the case. The system still boots and runs. Following the CompTIA troubleshooting methodology, which action should you take to establish and confirm a probable cause with the LEAST risk to the user's data?