CAS-003 · Question #67
A new piece of ransomware got installed on a company's backup server which encrypted the hard drives containing the OS and backup application configuration but did not affect the deduplication data…
The correct answer is D. Restoring the data will be difficult without the application configuration. Ransomware is a type of malware that restricts access to a computer system that it infects in some way, and demands that the user pay a ransom to the operators of the malware to remove the restriction. Since the backup application configuration is not accessible, it will…
Question
A new piece of ransomware got installed on a company's backup server which encrypted the hard drives containing the OS and backup application configuration but did not affect the deduplication data hard drives. During the incident response, the company finds that all backup tapes for this server are also corrupt. Which of the following is the PRIMARY concern?
Options
- ADetermining how to install HIPS across all server platforms to prevent future incidents
- BPreventing the ransomware from re-infecting the server upon restore
- CValidating the integrity of the deduplicated data
- DRestoring the data will be difficult without the application configuration
How the community answered
(19 responses)- A5% (1)
- B11% (2)
- C5% (1)
- D79% (15)
Explanation
Ransomware is a type of malware that restricts access to a computer system that it infects in some way, and demands that the user pay a ransom to the operators of the malware to remove the restriction. Since the backup application configuration is not accessible, it will require more effort to recover Eradication and Recovery is the fourth step of the incident response. It occurs before preventing future problems.
Topics
Community Discussion
No community discussion yet for this question.