Which of the following strategies provides the BEST response to a ransomware attack?

Question

Options

• AReal-time off-site replication
• BDaily incremental backup
• CDaily full backup
• DDaily differential backup

• A
  4% (1)
• B
  80% (20)
• C
  4% (1)
• D
  12% (3)

Explanation

Daily incremental backups (B) offer the best ransomware recovery posture because they capture only changes since the last backup run, preserving a clean restore point from before the infection while minimizing storage and backup window costs - a practical balance for frequent, reliable protection.

Why the others fall short:

• A (Real-time off-site replication) is the worst choice against ransomware: because replication is continuous, encrypted/corrupted files are immediately mirrored to the off-site target, eliminating any clean copy to restore from.
• C (Daily full backup) does provide a clean restore point, but consumes significantly more storage and time per cycle, making it less sustainable as a primary strategy compared to incremental.
• D (Daily differential backup) improves on full backups by only capturing changes since the last full backup, but the differential set grows larger each day until the next full backup, making it less efficient than incremental over time.

Memory tip: Think of ransomware as a fire - real-time replication is like piping flames directly to your backup site. Daily backups create a "break" in the chain. Among daily strategies, remember "Incremental = Intervals of safety" - frequent, small snapshots that ransomware hasn't touched yet.

No community discussion yet for this question.