Backups, network segmentation, and endpoint detection are listed as measures hospitals can use to defend against ransomware.

### Why this is right The hospital ransomware scenario names backups, network segmentation, and endpoint detection as defensive measures. They address recovery, spread between network areas, and detection of suspicious activity on devices. ### The concept A backup is a separate copy of data that can support restoration after loss or encryption. Network segmentation divides a network into separated areas, which can limit how far an incident spreads. Endpoint detection monitors devices such as computers and servers for suspicious behavior. These measures serve different purposes, so using them together provides more than one kind of defense. ### Terms - **Network segmentation**: dividing a network into separate sections to limit connections and contain problems. - **Endpoint detection**: monitoring devices such as computers and servers for suspicious activity. ### Remember Ransomware planning should consider prevention, containment, and recovery, not just one defensive measure.