A department's file server is encrypted by ransomware on a Monday morning. A note demands payment
in cryptocurrency within 48 hours. The department holds nightly backups on a NAS that is permanently
mounted as a drive letter on the same server.
Which assessment is correct?

Question

A department's file server is encrypted by ransomware on a Monday morning. A note demands payment
      in cryptocurrency within 48 hours. The department holds nightly backups on a NAS that is permanently
      mounted as a drive letter on the same server. 
       Which assessment is correct?

Answer

Paying the ransom is the recommended first step, since it guarantees the return of the decryption key.

Answer

The incident is a confidentiality breach only, since the files themselves were never removed from the server.

Answer

The backups are safe, because ransomware encrypts only the local system drive and never network shares.

Answer

The backups are likely to have been encrypted too, because a permanently mounted share is reachable by the ransomware; only offline, tested backups reliably survive.

Crowdly

A department's file server is encrypted by ransomware on a Monday morning. A not...

Want instant access to all verified answers on online.codl.lk?