Question

1.
2.
3.
4.
Answer (Detailed Solution Below)

Option 1 : show how a prepared incident-response plan can contain a ransomware attack

Advertisement

Detailed Solution

सही उत्तर show how a prepared incident-response plan can contain a ransomware attack है।

Key Points
Helpful?
PrepSnapprepsnap.in • Part -A

Question:

Read the following passage and answer the question below.

When the help-desk phone rang at 3 a.m., Maya knew it was not a routine outage. The hospital's file servers had begun renaming patient records with an unfamiliar extension, and a ransom note had appeared on every workstation, demanding payment in cryptocurrency within seventy-two hours. What followed was not panic but choreography: the response team isolated the infected network segment before dawn, preserved volatile memory from two critical servers, and shifted clinical work to paper charts so that no life-support system depended on a compromised machine. By noon, a forensic image of the first encrypted server revealed the entry point - a phishing email opened three weeks earlier by a billing clerk - and, crucially, that the offline backups were intact. The leadership then faced the question every victim dreads: pay or rebuild. Their playbook had settled it months earlier - never pay, because payment funds further attacks and rarely restores every file. Instead they rebuilt from clean backups, rotated every credential in the domain, and spent a fortnight hunting for persistence mechanisms the intruders might have left behind. The total downtime was eleven days, and the final report ran to ninety pages. Its bluntest line was not about technology at all: the breach had succeeded because one tired employee, at the end of a long shift, had clicked a link. The author's primary purpose in the passage is to:

1.
show how a prepared incident-response plan can contain a ransomware attack
2.
argue that hospitals should stop storing patient records on computers
3.
prove that paying the ransom is the fastest route to recovery
4.
explain how cryptocurrency ransom payments are traced by investigators

Correct Answer: show how a prepared incident-response plan can contain a ransomware attack

The passage narrates the hospital's step-by-step response - isolation, memory preservation and rebuilding from backups - as a model of disciplined incident handling. Option (b) is never suggested, (c) is contradicted by the "never pay" playbook, and (d) lies outside the passage's scope.

Downloaded from PrepSnap (prepsnap.in)