Which of the following actions should be taken to BEST mitigate the effects of this type of threat in the future?

A security analyst received a series of antivirus alerts from a workstation segment, and users reported ransomware messages. During lessons- learned activities, the analyst determines the antivirus was able to alert to abnormal behavior but did not stop this newest variant of ransomware.

Which of the following actions should be taken to BEST mitigate the effects of this type of threat in the future?
A . Enabling application blacklisting
B . Enabling sandboxing technology
C . Purchasing cyber insurance
D . Installing a firewall between the workstations and Internet

View Answer

Answer: B