Bird
0
0

A company tried to contain a ransomware attack by disconnecting only some infected devices. Why might this containment fail?

medium📝 Analysis Q14 of 15
Cybersecurity - Incident Response
A company tried to contain a ransomware attack by disconnecting only some infected devices. Why might this containment fail?
ABecause ransomware cannot spread over networks
BBecause disconnecting devices causes data loss
CBecause attackers can spread through other connected devices
DBecause containment requires deleting files immediately
Step-by-Step Solution
Solution:
  1. Step 1: Understand partial containment risks

    Leaving some infected devices connected allows attackers to spread.
  2. Step 2: Identify why partial isolation fails

    Attackers move through networked devices not fully isolated.
  3. Final Answer:

    Because attackers can spread through other connected devices -> Option C
  4. Quick Check:

    Partial isolation = Spread continues [OK]
Quick Trick: Partial isolation lets attackers spread [OK]
Common Mistakes:
MISTAKES
  • Thinking disconnect causes data loss
  • Believing ransomware can't spread via network
  • Assuming deleting files is containment

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes