A team restores from backup but has not checked whether the backup contains the same malicious persistence. What should it do?

1. Treat successful file copying as proof of eradication
2. Skip integrity checks to meet the schedule
3. Validate the recovery source and restored system before trusted return to service
4. Assume any backup predating the alert is clean