Parks ransomware recovery restores POS and reservation VMs that must stay isolated until they are verified clean. Which combined-stack action matches the security BC/DR runbook?
Select an answer to reveal the explanation.
Short Explanation
Recovery is not an open-house day at the park. Keep Carbon Black Cloud prevention on and leave Distributed Firewall default-deny until those restored VMs earn an allow.
Full Explanation
Business-continuity security for VMware Security uses both endpoint and network controls. Carbon Black Cloud continues to prevent execution on restored endpoints while NSX-T Distributed Firewall default-deny keeps east-west traffic closed until restore groups are allowed. Exclusion lists, global sensor bypass, and disabling Distributed Firewall collapse isolation during the window when recovered systems are least trusted.