Which of the following would work BEST to prevent this type of Incident in the future?

A security analyst is handling an incident in which ransomware has encrypted the disks of several company workstations.

Which of the following would work BEST to prevent this type of Incident in the future?
A . Implement a UTM instead of a stateful firewall and enable gateway antivirus.
B . Back up the workstations to facilitate recovery and create a gold Image.
C . Establish a ransomware awareness program and implement secure and verifiable backups.
D . Virtualize all the endpoints with dairy snapshots of the virtual machines.

View Answer

Answer: C

Explanation:

Ransomware is a type of malware that encrypts the files or disks of a victim’s device and demands a ransom for the decryption key. Ransomware can cause significant damage, disruption, and data loss for individuals and organizations. To prevent this type of incident in the future, the best strategy is to combine user education and data protection. A ransomware awareness program can help users recognize and avoid potential ransomware attacks, such as phishing emails, malicious attachments, or compromised websites. A secure and verifiable backup system can help users recover their data in case of a ransomware infection, without paying the ransom or relying on the attackers. A backup system should be regularly tested and updated, and stored offline or in a separate location from the original data.

Reference: Ransomware – What Is It & How To Remove It | Malwarebytes