Exam 220-1102 topic 1 question 602 discussion

D. Restore critical data from backup. Since the ransomware has already encrypted the files, the most effective way to recover the data is to restore it from a backup. A well-maintained backup system should have regular backups of critical data, allowing the organization to restore its systems to a previous state and recover the encrypted files. While scanning the files with anti-malware software and patching the servers are important security measures, they won't recover the encrypted data. Changing the files to read-only may prevent further damage, but it won't restore the original data. Google Gemini