Câu 169: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

Ransomware encrypted the entire human resources fileshare for a large financial institution. Security operations personnel were unaware of the activity until it was too late to stop it. The restoration will take approximately four hours, and the last backup occurred 48 hours ago. The management team has indicated that theRPO for a disaster recovery event for this data classification is 24 hours. Based on RPO requirements, which of the following recommendations should the management team make?

1. A. Leave the current backup schedule intact and pay the ransom to decrypt the data.
2. B. Leave the current backup schedule intact and make the human resources fileshare read-only.
3. C. Increase the frequency of backups and create SIEM alerts for IOCs. — đáp án hiện tại
4. D. Decrease the frequency of backups and pay the ransom to decrypt the data.