Free CompTIA Security+ SY0-701 Practice Question
A company has been struck by a ransomware attack which has left their files encrypted. Prior to this incident, the company followed a strict data backup policy. In order to restore operations and recover from the attack, which of the following is the BEST immediate action?
Isolate the infected systems and then negotiate payment with the attackers
Restore from last known good backups
Pay the ransom to quickly regain access to the encrypted files
Rebuild the affected systems from scratch
This question's topic:
CompTIA Security+ SY0-701 /
Threats, Vulnerabilities, and Mitigations
SAVE $49