Cyber Attack Recovery Theory

What is the first step after detecting a cyber attack?

• Ignore it

• Restart the system

• Contain the attack

• Inform the public

Which of the following is most important during cyber incident recovery?

• Changing the hardware

• Blaming the attacker

• Posting it on social media

• Restoring operations safely

What is a backup in the context of cyber recovery?

• Extra antivirus

• A copy of data stored safely

• A second user account

• A physical lock

Why is data backup important after a cyber attack?

• It helps restore lost data

• It reduces electricity

• It saves money

• It increases speed

What does a disaster recovery plan include?

• Weekly meeting notes

• Security questions

• School attendance records

• Steps to restore IT services

Which one is part of recovery best practices?

• Ignoring minor issues

• Keeping only one backup

• Regularly testing backup systems

• Sharing passwords

What should be done after recovering from a cyber attack?

• Analyse the cause and fix vulnerabilities

• Resume work immediately

• Forget the incident

• Upgrade RAM

Which type of backup is created every time data changes?

• Full backup

• Differential backup

• Incremental backup

• Weekly backup

What is the purpose of a recovery team?

• Handle promotions

• Sell software

• Restart the server

• Respond to and manage cyber incidents

Which software can help in restoring damaged or lost files?

• Word Processor

• File Recovery Tool

• Video Editor

• Screenshot Tool