Study. uk . com
  1. Home
  2. All questions
  3. Question 70

CompTIA Security+ study material · question 70 of 611

An organisation restores cleanly from backup after a ransomware attack, yet still faces a serious problem. What is it?

  1. The decryption key remains unused
  2. Data was exfiltrated before encryption, so disclosure risk remains
  3. The recovery point objective has been exceeded
  4. The backups must now be re-encrypted
Show the answer

Answer: B. Data was exfiltrated before encryption, so disclosure risk remains

Under double extortion the restore ends the outage but not the threat to publish the stolen data.

Source: CISA #StopRansomware Guide (CISA) — CISA #StopRansomware Guide › Ransomware and Data Extortion

Challenge yourself on this topic → Study as cards