Skip to content

CMA Intermediate · Operations Management and Strategic Management · Digital Strategy

A manufacturing firm's files are encrypted by malware and the attackers demand payment in cryptocurrency to restore access. Which control would MOST directly reduce the firm's loss from this type of attack without paying the ransom?

Regular offline, tested backups are the most direct control. They let the firm restore encrypted data and resume operations without paying the ransom. Shared logins worsen security, and domain names or social media accounts do nothing to restore locked files.

  1. ARegular offline, tested backups of critical dataCorrect
  2. BIncreasing the length of the corporate website's domain name
  3. CAdopting a larger number of social media accounts
  4. DMoving all staff to a single shared login

Explanation

Ransomware denies access to data. Restoring from offline, tested backups lets the firm recover without paying. A shared login weakens access control and increases risk, while domain name length and social media accounts have no bearing on recovery.

Did you get it right without looking?

One question tells you little. A timed set on Digital Strategy shows your real accuracy, how long you take and where you lose marks.

Practise Digital StrategyFree diagnostic mock

More Digital Strategy questions