How to protect a Windows network from ransomware

The video discusses a potential ransomware attack on Honda, analyzed by Kaspersky. It details the malware's launch methods, including the use of misleading file names and targeted IP addresses. The video emphasizes the importance of recognizing ransomware tactics, such as targeting shadow copies and SCADA systems. It provides preventive measures, like monitoring event logs and using PowerShell for alerts. Security recommendations include using Microsoft Defender ATP, enforcing two-factor authentication, and maintaining regular backups.

What was the initial suspicion about the technical difficulties faced by Honda?

• A server upgrade issue

• A software bug

• A ransomware attack

• A power outage

How did the attackers attempt to disguise their malicious files?

• By using encrypted file names

• By using common file names and KB numbers

• By hiding them in system folders

• By renaming them to random strings

What is a common target for ransomware attacks besides data files?

• Operating systems

• Shadow volume copies and backups

• User interface settings

• Internet browsers

What is a recommended method to detect unauthorized scheduled tasks?

• Using antivirus software

• Checking event logs for specific events

• Running a full system scan

• Monitoring network traffic

Why is it important to use different Microsoft 365 licenses based on risk levels?

• To save costs on licensing

• To provide better security for high-risk users

• To simplify license management

• To ensure compatibility with all devices

What is a key recommendation for protecting privileged accounts?

• Enforcing multifactor authentication

• Regularly changing passwords

• Using strong passwords

• Limiting account access

What is crucial for recovery from a ransomware attack without paying the ransom?

• Having a strong firewall

• Employing a VPN

• Regular automatic backups

• Using antivirus software