Question

A financial services company is designing a business continuity and disaster recovery (BCDR) strategy to recover from a destructive ransomware attack that could encrypt both production workloads and the identity infrastructure. The security architect must define the recovery sequence to ensure that restored systems can be trusted and reconnected safely. Which recovery approach should the architect prioritize first in the restoration plan?

Accepted Answer

Restore and validate the identity and privileged access systems (Tier 0), such as domain controllers and Entra ID components, before restoring dependent workloads.

Answer

Restore the customer-facing web application tier first so that revenue-generating services resume as quickly as possible.

Answer

Restore all systems simultaneously from the most recent backups to minimize total recovery time objective (RTO).

Answer

Restore file servers and shared data repositories first because they contain the highest-value business information.