CAS-005 · Question #272
A company recently experienced a ransomware attack. Although the company performs systems and data backup on a schedule that aligns with its RPO (Recovery Point Objective) requirements, the backup…
The correct answer is C. Perform regular disaster recovery testing of IT and non-IT systems and processes. Understanding the Ransomware Issue: The key issue here is that backups were not recoverable within the required RPO timeframe. This means the organization did not properly test its backup and disaster recovery (DR) processes. To prevent this from happening again, regular…
Question
A company recently experienced a ransomware attack. Although the company performs systems and data backup on a schedule that aligns with its RPO (Recovery Point Objective) requirements, the backup administrator could not recover critical systems and data from its offline backups to meet the RPO. Eventually, the systems and data were restored with information that was six months outside of RPO requirements. Which of the following actions should the company take to reduce the risk of a similar attack?
Options
- AEncrypt and label the backup tapes with the appropriate retention schedule before they are sent to
- BImplement a business continuity process that includes reverting manual business processes.
- CPerform regular disaster recovery testing of IT and non-IT systems and processes.
- DCarry out a tabletop exercise to update and verify the RACI matrix with IT and critical business
How the community answered
(49 responses)- A4% (2)
- B2% (1)
- C86% (42)
- D8% (4)
Explanation
Understanding the Ransomware Issue: The key issue here is that backups were not recoverable within the required RPO timeframe. This means the organization did not properly test its backup and disaster recovery (DR) processes. To prevent this from happening again, regular disaster recovery testing is essential. Why Option C is Correct: Disaster recovery testing ensures that backups are functional and can meet business continuity Frequent DR testing allows organizations to identify and fix gaps in recovery strategies. Regular testing ensures that recovery meets the RPO & RTO (Recovery Time Objective) requirements.
Community Discussion
No community discussion yet for this question.