[mothered]

1. Visit site that are protected by Secure Sockets Layer (SSL) which means the sites with https
2. Do not download ANYTHING from non trusted sites

I strongly advise to have dedicated systems, one for sensitive account logins (and nothing more) and the other being a test system solely for experimental purposes when navigating around the net. If the latter Is compromised, you have nothing to lose other than an hour or so hitting a clean Installation of the OS.

VMs are fine but If you're running a bridged connection (Guest to Host), there's always a risk of Infection on the physical machine.

E. Backup Data
Yes, it is the right time to backup your important data, as above instructions are to prevent ransomware, not to stop it.

1. Buy an external Hard Disk Drive
2. Backup Important Data or upload on Google Drive

I'm glad you've mentioned the Importance of data backup.

In terms of performing backups, I've always gone by my motto of "Today Is never too early, and tomorrow Is always too late".