Cert Master

KT-EPS Ransomware

Ransomware group threatens leak of stolen data. What does 'double extortion' imply?

Multiple choice — select one answer

Answer choices

  1. a. They encrypt twice with different algorithms only, without security or identity team coordination per policy.
  2. b. Backups are automatically safe from leak, without security or identity team coordination per policy.
  3. c. They may publish exfiltrated data even if you restore from backups
  4. d. They only attack printers, without security or identity team coordination per policy.

Architectural breakdown & explanation

Exfiltration plus encryption means recovery does not eliminate leak risk.

Correct answer(s): c. They may publish exfiltrated data even if you restore from backups

Exam domain: Ransomware (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Endpoint Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications