Examkin

Question

Difficulty: EasyMalware Types and Indicators of Compromise

A system administrator receives an alert that several host files on a workstation have been encrypted unexpectedly, and a pop-up window on the desktop demands a cryptocurrency payment to obtain the decryption key. Which of the following malware types is described in this scenario?

  1. RansomwareAnswer
  2. B
    Worm
  3. C
    Trojan
  4. D
    Host-based firewall

Answer

Ransomware
Ransomware encrypts a target's files or restricts access to the system, displaying a notice that demands payment in exchange for restoring functionality or providing a decryption key.

Step-by-Step Solution

1
Identify key technical indicators from the scenario.
The primary indicators are unauthorized encryption of user files and a visible ransom demand requiring cryptocurrency payment.
Recognizing the combination of file access loss and extortion allows accurate malware classification.
2
Map the observed behavior to malware categories.
Malware that locks or encrypts data to extort victims is categorized as ransomware.
Other malware types perform different primary functions, such as secret monitoring, stealth access, or self-replication across network nodes.

Key Concept

Ransomware Indicators of Compromise
Rate this question

Topics

Malware Types and Indicators of Compromise

More questions from this topic