What should Justin do in this instance?
Select one:
A. Pay the ransom, then notify his security officer of the potential cyber attack.
B. Do not pay the ransom; notify his security officer of the potential cyber attack immediately.
C. Pay the ransom; he needs to access his files to be able to complete his work.
D. Shut down the computer; this must be a temporary attack and he knows to shut down in the event of an attack
Answer (2)
In this scenario, Justin is facing a potential cyber attack, specifically a ransomware attack, where his files have likely been encrypted, and access is denied until a ransom is paid. Here's what Justin should do:
Option b: Do not pay the ransom; notify his security officer of the potential cyber attack immediately.
There are several reasons why this is the best approach:
Do Not Pay the Ransom: Paying the ransom does not guarantee that Justin will regain access to his files. Cybercriminals may not provide the decryption key after payment, and it could also make him or his organization a target for future attacks. Additionally, paying ransoms supports the continuation of this illegal activity.
Notify Security Officer Immediately: Informing the security officer is crucial as they can take immediate steps to mitigate the effects of the attack, such as isolating the infected systems, beginning an investigation, and working on restoring data from backups. This is a key step in the response and recovery phase after detecting a security threat.
Data Recovery: Security professionals can work on recovering data using backups, assuming proper backup procedures were followed. Regular data backups are a key part of cybersecurity best practices and can often be instrumental in recovering from such attacks without paying the ransom.
Learn and Improve Security: Notifying security personnel will also help the organization improve its security measures to prevent future attacks. They can assess how the attack occurred and address any vulnerabilities.
By following these steps, Justin can handle the situation responsibly, preventing further damage and supporting stronger cybersecurity practices within his organization.
Justin should choose Option B: Do not pay the ransom; notify his security officer of the potential cyber attack immediately. This approach helps prevent further risks and allows for recovery strategies to be implemented. Reporting the attack can also improve security measures to safeguard against future incidents.
;
