Certified Ethical Hacker (CEH v11) — Question 138

Which of the following is the best countermeasure to encrypting ransomwares?

Answer options

• A. Use multiple antivirus softwares
• B. Pay a ransom
• C. Keep some generation of off-line backup
• D. Analyze the ransomware to get decryption key of encrypted data

Correct answer: C

Explanation

The correct answer is C, as keeping offline backups allows recovery of data without succumbing to the ransomware's demands. Options A and B are ineffective because using multiple antivirus programs may not stop all ransomware, and paying a ransom does not guarantee data recovery. Option D is also not reliable since analyzing ransomware can be complex and may not yield a decryption key.