Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Information Systems

A Bengaluru fintech suffers a ransomware attack that encrypts its servers. Its backups are stored on a network drive permanently mounted to the same servers and were also encrypted. Which backup design principle would have best protected recovery in this scenario?

Keeping at least one backup copy offline or immutable and away from the production network, as in the 3-2-1 approach, would have protected recovery. Ransomware encrypts anything reachable, so a connected backup drive fails, while an isolated copy remains intact for restoration.

  1. AKeeping at least one copy offline or immutable and off the production network, as in the 3-2-1 approachCorrect
  2. BIncreasing the frequency of full backups to the same mounted drive
  3. CCompressing backups to reduce storage cost
  4. DEncrypting only the production database with a stronger key

Explanation

The 3-2-1 approach keeps three copies on two media types with one copy off-site, and an offline or immutable copy is out of the attacker's reach. More frequent backups to the same mounted drive would also be encrypted. Compression and stronger production encryption do not isolate the backup.

Did you get it right without looking?

One question tells you little. A timed set on Information Systems shows your real accuracy, how long you take and where you lose marks.

Practise Information SystemsFree diagnostic mock

More Information Systems questions