F5

401 · Question #121

When responding to a ransomware attack, what should be a priority in the incident response plan?

The correct answer is B. Isolating infected systems to prevent further spread. See the full explanation below for the reasoning.

Section 6: Threat Management and Incident Response

Question

When responding to a ransomware attack, what should be a priority in the incident response plan?

Options

APaying the ransom to the attackers
BIsolating infected systems to prevent further spread
CDeleting all backups to prevent data leaks
DIgnoring the attack and hoping it goes away

How the community answered

(53 responses)

A
13% (7)
B
79% (42)
C
2% (1)
D
6% (3)

Topics

#ransomware#incident response#system isolation#containment

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full 401 Practice