mediumMultiple ChoiceObjective-mapped
FC0-U71 Practice Question: The IT administrator for a small company with 50…
You are the IT administrator for a small company with 50 employees. The company uses a shared network drive for project files. Employees have read/write access to all folders on the drive. Recently, a ransomware attack encrypted many files on the network drive after an employee's workstation became infected. The employee had mapped the drive as a local letter. Backups are available but restoring takes several hours. Management wants to reduce the risk of future ransomware damage to the network drive. You are considering implementing one of the following controls. Which control would be most effective in limiting the spread of ransomware to the network drive?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement file-level permissions so users only have write access to folders they need.
Implementing file-level permissions with the principle of least privilege restricts users to only write access to folders they need. This limits the number of files a ransomware infection can encrypt, reducing potential damage. Option A is incorrect because disk encryption protects data at rest but does not prevent ransomware from encrypting files. Option C is incorrect because antivirus software may not detect or stop new ransomware variants. Option D is incorrect because a VPN secures remote access but does not protect against internal threats like ransomware.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable disk encryption on the network drive.
Why it's wrong here
Disk encryption protects data at rest but does not prevent encryption by ransomware.
- ✓
Implement file-level permissions so users only have write access to folders they need.
Why this is correct
Least privilege reduces the scope of encryption if a workstation is infected.
- ✗
Install antivirus software on all workstations and schedule weekly scans.
Why it's wrong here
Antivirus may not stop all ransomware, especially if it is new.
- ✗
Require all employees to use a VPN when accessing the network drive.
Why it's wrong here
VPN secures remote access but does not prevent internal infection spread.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.