Which is the single most important property of a backup in a ransomware scenario?
- A That it is immutable or air-gapped so attackers cannot delete or encrypt it
- B That it is compressed
- C That it runs nightly
- D That it is stored on SSDs
Answer
That it is immutable or air-gapped so attackers cannot delete or encrypt it
Modern ransomware specifically targets backups first. A backup reachable with the stolen credentials is not a backup.





