Recover from a Ransomware Attack CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   After a ransomware attack, a company decides to rebuild its affected application servers. The servers run a custom application that was installed from a trusted source. What is the most important step to ensure the rebuilt servers are secure before returning them to production?

   • AConnect the servers to the network immediately to verify they can communicate with other systems.
   • BRestore the application configuration from the pre-attack backup to save time.
   • CApply the latest security patches and updates to the operating system and application.
   • DCopy the application data from the infected servers to the new servers to preserve business continuity.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of defining roles in a ransomware recovery plan?

   • ATo assign clear responsibilities so recovery actions are executed efficiently and without confusion
   • BTo identify which employees should be laid off after the incident
   • CTo ensure that every employee has a task during the recovery
   • DTo satisfy regulatory requirements for incident response documentation
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What should be performed after rebuilding a system to confirm it is safe to return to production?

   • AImmediate connection to the production network
   • BValidation of system integrity and functionality
   • CDeletion of all backup copies
   • DNotification of all users that the system is available
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the recommended approach to ensure backups are not compromised during a ransomware attack?

   • AKeep backups offline or in an isolated environment
   • BUse the same credentials for backup and production systems
   • CPerform backups only after an attack occurs
   • DStore backups on the same network as production systems
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which component is essential to include in a comprehensive ransomware recovery plan?

   • AA list of employee personal contact information
   • BA marketing plan to communicate with customers after the attack
   • CA list of all software licenses owned by the organization
   • DDetailed steps, assigned roles, and procedures for restoring systems and data
   Reveal Solution Discussion Select an answer first