nerdexam
Isaca

CISM · Question #515

Which type of backup BEST enables an organization to recover data after a ransomware attack?

The correct answer is A. Offline backup. An offline backup is the best option for recovering data after a ransomware attack. It is stored in a manner that is not accessible from the network, making it less vulnerable to encryption or deletion by ransomware. Since offline backups are not directly connected to the…

Submitted by olafpl· Apr 18, 2026Information Security Incident Management

Question

Which type of backup BEST enables an organization to recover data after a ransomware attack?

Options

  • AOffline backup
  • BIncremental backup
  • CDifferential backup
  • DOnline backup

How the community answered

(53 responses)
  • A
    94% (50)
  • B
    4% (2)
  • D
    2% (1)

Explanation

An offline backup is the best option for recovering data after a ransomware attack. It is stored in a manner that is not accessible from the network, making it less vulnerable to encryption or deletion by ransomware. Since offline backups are not directly connected to the systems, they provide a secure recovery option without the risk of the ransomware affecting the backup data.

Topics

#Offline backup#Ransomware recovery#Data recovery#Disaster recovery

Community Discussion

No community discussion yet for this question.

Full CISM Practice