← Ransomware IR — Playbook, Containment, and Recovery

Module Quiz

10 questions · Pass at 80%

Question 1 of 10

An IR analyst arrives at a scene where a file server is actively encrypting files at high speed. What is the FIRST action to take?