F5

401 · Question #104

Scenario: Your organization has detected a ransomware attack. The response team is unsure of the best course of action. What should they prioritize?

The correct answer is A. Isolating infected systems to prevent the spread of ransomware. See the full explanation below for the reasoning.

Section 6: Threat Management and Incident Response

Question

Scenario: Your organization has detected a ransomware attack. The response team is unsure of the best course of action. What should they prioritize?

Options

AIsolating infected systems to prevent the spread of ransomware.
BPaying the ransom immediately to regain access to data.
CShutting down all systems to avoid further damage.
DIgnoring the attack in hopes it resolves itself.

How the community answered

(31 responses)

A
74% (23)
B
16% (5)
C
3% (1)
D
6% (2)

Topics

#ransomware#incident response#containment#isolation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full 401 Practice