Exam CISM topic 1 question 113 discussion

B & D is more on preventive steps. A will only result in extension of the ransomware....do C is it :)

Continual server replication will also mean the ransomware replicate over to the other server. So offline backup system is the most effective against ransomware provided it is tested regularly.

C. A properly tested offline backup system

A properly tested offline backup system would be the most effective way to avoid paying the ransom in this scenario. With a proper offline backup system, the hospital would be able to recover the encrypted server without paying the ransom. Continual server replication, employee training on ransomware, and a properly configured firewall may help prevent ransomware attacks, but they would not help the hospital avoid paying the ransom in this scenario.