CompTIA CySA+ (CS0-003) — Question 73

Which of following would best mitigate the effects of a new ransomware attack that was not properly stopped by the company antivirus?

Answer options

• A. Install a firewall.
• B. Implement vulnerability management.
• C. Deploy sandboxing.
• D. Update the application blocklist.

Correct answer: C

Explanation

Deploying sandboxing is the most effective way to analyze and contain potential ransomware threats before they can affect the system. While a firewall can block unauthorized access and vulnerability management can reduce risks, these measures do not directly isolate and analyze new threats like sandboxing does. Updating the application blocklist may help prevent known threats but would not address newly emerging ransomware in real-time.