Which of the following is MOST important when developing an effective ransomware response strategy?

Question

Options

• AUpdating all software to the latest versions on a regular basis
• BMaintaining an appropriate backup process
• CInstalling a next-generation firewall
• DConducting regular employee training on cybersecurity awareness

• A
  14% (3)
• B
  73% (16)
• C
  9% (2)
• D
  5% (1)

Explanation

Maintaining an appropriate backup process (B) is the cornerstone of ransomware response because it gives organizations the ability to restore systems without paying the ransom - making the attack largely ineffective. If clean, tested backups exist (especially offline/air-gapped ones), recovery is possible regardless of how the ransomware entered the environment.

Why the distractors fall short:

• A (software updates) - Patching reduces attack surface but doesn't help you recover once ransomware has already encrypted your data.
• C (next-gen firewall) - A preventive control that can block some attack vectors, but ransomware frequently enters via phishing or insider actions that a firewall cannot stop.
• D (employee training) - Valuable for reducing human error, but no training program achieves 100% effectiveness, and it offers no recovery path when an incident occurs.

Memory tip: Think of the question as asking about response, not prevention. A, C, and D are all preventive controls; only B gives you a way to respond and recover - which is what the question is specifically testing.

No community discussion yet for this question.