Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

Questions 1 An organization needs access to backups of its data and applications

ID: 334897 • Letter: Q

Question

Questions 1

An organization needs access to backups of its data and applications in order to recover from a ransomware attack that encrypts its directory and critical information.

                True

                False

Question 2

It is always best to tell the public everything a company knows about a cyber incident, including the technical details and potential perpetrators, irregardeless of the legal consequences.

                True

                False

Question 3

During a post-incident review, an organization should identify areas in their incident response plan that require improvement and reconsideration in order to optimize response for future incidents.

                True

                False

Explanation / Answer

Question 1: True - The company needs to continue working even after the incident and for that, it is great to have a back up of the data so that the business process is not impacted.

Question 2: False - The company should only talk about the incident and not about the technical aspects of it unless they are asked by the legal entities. Disclosing that information will give rise to new questions.

Question3: True - The areas that are prone to an attack should be rectified first so the incident response plan should talk about those areas. This will reduce the future attack chances.