CISM · Question #238
An organization has experienced a ransomware attack. Which of the following is the BEST course of action to prevent further attacks?
The correct answer is A. Implement application allow listing. The best course of action to prevent further ransomware attacks is to implement application allow listing. This control only allows approved applications to run, effectively preventing unauthorized or malicious software, such as ransomware, from executing on systems. While more…
Question
An organization has experienced a ransomware attack. Which of the following is the BEST course of action to prevent further attacks?
Options
- AImplement application allow listing.
- BPerform more frequent backups.
- CImplement application deny listing.
- DPublish the security policy.
How the community answered
(41 responses)- A78% (32)
- B12% (5)
- C7% (3)
- D2% (1)
Explanation
The best course of action to prevent further ransomware attacks is to implement application allow listing. This control only allows approved applications to run, effectively preventing unauthorized or malicious software, such as ransomware, from executing on systems. While more frequent backups can help with recovery and publishing security policies raises awareness, application allow listing provides a proactive defense mechanism to prevent ransomware and other malicious software from being installed or executed.
Topics
Community Discussion
No community discussion yet for this question.