Skip to content
?
Cyber Interview Questions
?
Questions
Quiz
Interview
Guides
Search
Home
Quiz
Incident Responder
Quiz for
Incident Responder
1 / 12
30s · 0 pts
What is ransomware, and walk me through how you respond once it is actively encrypting systems.
1
Hard-power everything off at once and reformat all the disks right away, without taking notes or capturing memory.
2
Isolate affected hosts, preserve evidence, scope the spread and strain, eradicate, then restore clean backups.
3
Pay the ransom immediately to get the decryptor and minimize downtime, then investigate the root cause after.
4
Ignore the alert and just wait; modern ransomware keys eventually expire, so the files will decrypt themselves.
Tip: press 1–4 to answer, Enter for next.