MENU
A ransomware attack recently disrupted operations at a manufacturing facility, specifically targeting its IoT-integrated conveyor system. While attempting to recover from the incident, the incident response team discovered that the available backups were incomplete---several critical sensor logs and control commands were missing, which caused delays in restoring device functions and syncing with other systems. The team concludes that relying on traditional backup routines alone is insufficient for restoring full IoT functionality after an attack. Which strategy would best prevent such issues in future recovery efforts?
This scenario highlights recovery challenges specific to IoT environments, which are addressed in the ECIH Endpoint and IoT Incident Handling modules. IoT systems generate continuous streams of operational data, configuration states, and control commands that are essential for accurate recovery after disruption.
Option D is correct because maintaining synchronized cloud replicas of critical IoT resources ensures near-real-time availability of sensor data, device configurations, and control logic. ECIH emphasizes that traditional periodic backups are often insufficient for IoT and OT systems due to their dynamic and state-dependent nature. Cloud replication supports faster, more complete restoration and reduces data gaps.
Options A, B, and C rely on static or delayed backup mechanisms that cannot capture the operational state required to restore IoT systems accurately. Tape archives and external drives introduce latency and risk data loss, while ZIP archives lack synchronization.
ECIH recovery guidance stresses resilience and continuity, particularly for operational technology. Continuous replication is therefore the most effective strategy.
Currently there are no comments in this discussion, be the first to comment!