FREEASSESSMENTIntermediate · 5 questions

Ransomware defense and response — scenario check

Answer every question, then review your score and the explanation behind each answer.

Practice, not certification. Results stay in this page and reset on reload. Nothing is sent to an account or payment service.

Question 1Encryption is detected on several workstations. What is the best response pattern?

AReconnect all backup storage immediatelyBWipe every device without recording anythingCWait for a public attribution reportDCoordinate isolation and preserve evidence

Question 2Why separate backup administration from everyday accounts?

ATo remove the need for monitoringBTo avoid recording changesCTo reduce shared compromise pathsDTo make restores impossible

Question 3A restore completes. What is still needed?

ADelete the timelineBValidate dependencies and a clean recovery stateCAssume all attacker access is goneDReconnect every system at once

Question 4What describes RPO?

AAcceptable data-loss windowBTime until a helpdesk opensCNumber of backupsDThe maximum password age

Question 5What is a useful outcome of a tabletop exercise?

AA guarantee no incident can occurBAn automatic certificate of securityCA reason to stop backupsDAssigned improvements based on tested decisions

Keep building the skill.

Review the lesson →

Ransomware defense and response — scenario check

Keep building the skill.

Practise the first-response decisions.