Isaca CISM Exam - Topic 7 Question 57 Discussion

Actual exam question for Isaca's CISM exam

Question #: 57
Topic #: 7

A critical server for a hospital has been encrypted by ransomware. The hospital is unable to function effectively without this server Which of the following would MOST effectively allow the hospital to avoid paying the ransom?

AEmployee training on ransomware

BA properly tested offline backup system

CA continual server replication process

DA properly configured firewall

Show Suggested Answer

Suggested Answer: D

by Lezlie at Feb 03, 2023, 02:16 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Halina

7 months ago

Surprised this is even a question, backups should be standard!

upvoted 0 times

...

Lauran

7 months ago

C could work, but it’s not as foolproof as B.

upvoted 0 times

...

Brigette

7 months ago

I agree, training is good but won’t help in this situation.

upvoted 0 times

...

Annabelle

7 months ago

Not sure if backups are enough, what if they get encrypted too?

upvoted 0 times

...

Matilda

7 months ago

Definitely B, offline backups are a lifesaver!

upvoted 0 times

...

Tamra

8 months ago

A firewall seems important for security, but I doubt it would help recover from an attack like this. I think the backup option is definitely stronger.

upvoted 0 times

...

Luis

8 months ago

I practiced a similar question where replication was mentioned, but I wonder if continual server replication (option C) would really protect against ransomware effectively.

upvoted 0 times

...

Janessa

8 months ago

I'm not entirely sure, but I feel like employee training could help prevent ransomware attacks in the first place. Still, I think it won't help much after the fact.

upvoted 0 times

...

Leeann

8 months ago

I remember discussing how backups are crucial in ransomware scenarios. I think option B about offline backups might be the best choice here.

upvoted 0 times

...

Stefany

8 months ago

I'm feeling a bit confused by this question. Disabling the switch ports seems like it could cause issues, but I'm not entirely sure about the other options either. I'll need to review the high availability concepts again before answering this.

upvoted 0 times

...

Beula

8 months ago

I feel pretty confident about this one. Dividing the form into multiple steps is definitely the way to go. It creates a more user-friendly experience.

upvoted 0 times

...

Ernest

8 months ago

VPC doesn't seem directly related to managing traffic; I'm leaning towards Auto Scaling to efficiently handle those sudden spikes.

upvoted 0 times

...

Melynda

1 year ago

Offline backups, the true heroes of the digital age. Now, if only the hospital had invested in a backup system that could also moonlight as a hospital bed, they'd be all set!

upvoted 0 times

Marva

11 months ago

D: Employee training on ransomware is important too, to prevent future attacks.

upvoted 0 times

...

Ruthann

11 months ago

C: A continual server replication process could also be helpful in preventing such incidents.

upvoted 0 times

...

Elfrieda

11 months ago

B: Definitely, offline backups are a lifesaver in situations like this.

upvoted 0 times

...

Winfred

11 months ago

A: B) A properly tested offline backup system

upvoted 0 times

...

Jolene

1 year ago

Employee training? Psh, who needs that when you've got a continual server replication process. I'm sure the hospital staff can just swap out servers like they're playing musical chairs.

upvoted 0 times

Desmond

12 months ago

C: A continual server replication process

upvoted 0 times

...

Alonso

12 months ago

B: A properly tested offline backup system

upvoted 0 times

...

Casie

1 year ago

A: Employee training on ransomware

upvoted 0 times

...

Ligia

1 year ago

Ah, the joys of ransomware. If only the hospital had invested in a firewall that could double as a time machine, then they'd never have to worry about this mess.

upvoted 0 times

Flo

12 months ago

C: A: Employee training on ransomware

upvoted 0 times

...

Fatima

12 months ago

B: That's a good point. It's always important to have backups in case of emergencies.

upvoted 0 times

...

Louvenia

1 year ago

A: B) A properly tested offline backup system

upvoted 0 times

...

Truman

1 year ago

I'm going with option B - a properly tested offline backup system. It's the only way to truly protect against the ransomware menace and keep the hospital up and running.

upvoted 0 times