Cert Master

KT-EPS Ransomware

Backups are immutable; leadership asks about paying ransom. Security recommendation?

Multiple choice — select one answer

Answer choices

  1. a. Disable MFA to speed recovery, without security or identity team coordination per policy.
  2. b. Publish decryption keys online, using shared credentials instead of individual accountability.
  3. c. Restore from immutable backups and involve legal/law enforcement; payment does not guarantee decryption
  4. d. Pay anonymously on personal card, without security or identity team coordination per policy.

Architectural breakdown & explanation

Immutable backups are primary recovery; payment is uncertain and may fund crime.

Correct answer(s): c. Restore from immutable backups and involve legal/law enforcement; payment does not guarantee decryption

Exam domain: Ransomware (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Endpoint Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications