Paying a ransomware demand guarantees that the organization will regain access to its files or systems.

### Why this is right The material explicitly warns that payment does not guarantee the organization will regain access to its information. Ransomware locks files or systems until a ransom is demanded, but payment is no assurance of recovery. ### The concept Ransomware is malware that makes files or systems inaccessible and demands payment. An incident response plan should prepare the organization to respond and recover rather than assume that paying will restore access. Backup planning is therefore relevant to recovery, although the material does not say that any single recovery measure will always work. ### The other options - **True**: This is the tempting but unsupported assumption that a threat actor will honor a demand. The source says payment does not guarantee access will be restored. ### Terms - **Ransomware**: Malware that locks access to files or systems until a ransom is demanded. - **Malware**: Software intended to cause harm or perform unauthorized actions. ### Remember A ransom payment is not a recovery guarantee.