CAS-005 Question #272: Real Exam Question with Answer & Explanation

Question

A company recently experienced a ransomware attack. Although the company performs systems and data backup on a schedule that aligns with its RPO (Recovery Point Objective) requirements, the backup administrator could not recover critical systems and data from its offline backups to meet the RPO. Eventually, the systems and data were restored with information that was six months outside of RPO requirements. Which of the following actions should the company take to reduce the risk of a similar attack?

Options

• AEncrypt and label the backup tapes with the appropriate retention schedule before they are sent to
• BImplement a business continuity process that includes reverting manual business processes.
• CPerform regular disaster recovery testing of IT and non-IT systems and processes.
• DCarry out a tabletop exercise to update and verify the RACI matrix with IT and critical business