During a ransomware attack, what should defenders do first with the infected computers?

Start playing free

  1. Pay the attackers immediately
  2. Find them and cut them off from the network
  3. Keep using them so work is not lost

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every CAP Aerospace Cadet Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. CISA #StopRansomware Guide www.cisa.gov/stopransomware/ransomware-guide Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game