A Small Business Just Recovered from a Ransomware Attack Against

question 49

Multiple Choice

A small business just recovered from a ransomware attack against its file servers by purchasing the decryption keys from the attackers. The issue was triggered by a phishing email and the IT administrator wants to ensure it does not happen again. Which of the following should the IT administrator do FIRST after recovery?

• A) Scan the NAS for residual or dormant malware and take new daily backups that are tested on a frequent basis.
• B) Restrict administrative privileges and patch all systems and applications.
• C) Rebuild all workstations and install new antivirus software.
• D) Implement application whitelisting and perform user application hardening.

---

Definitions:

Uncollectible

Accounts receivable that cannot be recovered and are therefore written off as a loss.

Not-for-Profit School

An educational institution that operates without the primary aim of making profits, instead focusing on providing quality education.

Contribution Revenues

Revenues received by not-for-profit entities from donations, grants, or other forms of financial support.

Deferred Revenues

Deferred revenues are payments received by a company for goods or services that are yet to be delivered or performed, recorded as a liability on the balance sheet.