Free practice · multiple-choice · hard
Practice
Respond without destroying ransomware evidence
A worker sees renamed files, a ransom note, and a shared-drive error. Which actions belong in the safe handoff?
Recovery readiness
A backup is useful only when it is protected and can be restored
- PrioritizeCritical data, services, owners, dependencies
- ProtectSeparated copies and limited deletion rights
- MonitorCoverage, failures, age, and access
- TestRestore against defined recovery targets
- RespondStop and preserve during an incident
- RecoverRestore clean services by authorized priority
Business priorities guide coverage; separation, least privilege, monitoring, and restore tests create evidence that recovery can work.