Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

After a ransomware attack encrypts a payment processor's production systems, the firm restores from backups that were stored on the same network and were also encrypted. Which weakness in its resilience design does this most directly illustrate?

The failure shows a lack of isolated, immutable or offline backups. Because the backups sat on the same network, the ransomware encrypted them too, removing the recovery option. Good resilience design segregates backup copies so they survive a compromise of production systems.

  1. ALack of isolated, immutable or offline backups to support recoveryCorrect
  2. BInsufficient perimeter firewall rule logging
  3. COverly frequent employee phishing training
  4. DExcessive use of multi-factor authentication

Explanation

Backups reachable from the compromised network were destroyed with the primary data, so recovery failed. Resilient practice keeps copies segregated, offline or immutable. Firewall logging, training frequency and MFA do not explain the loss of recoverability.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions