nerdexam
EC-Council

112-52 · Question #31

Which of the following is an effective countermeasure against ransomware attacks?

The correct answer is A. Regularly updating antivirus software. Regularly updating antivirus software (A) is a proven defense against ransomware because modern antivirus tools include signature databases and behavioral detection that recognize and block known ransomware strains before they can encrypt files. Option B is the opposite of safe p

Attacks and Countermeasures

Question

Which of the following is an effective countermeasure against ransomware attacks?

Options

  • ARegularly updating antivirus software
  • BAllowing macro execution in all documents
  • CDisabling system updates
  • DIgnoring phishing awareness training

How the community answered

(24 responses)
  • A
    92% (22)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Regularly updating antivirus software (A) is a proven defense against ransomware because modern antivirus tools include signature databases and behavioral detection that recognize and block known ransomware strains before they can encrypt files. Option B is the opposite of safe practice - enabling macros in all documents is a primary ransomware delivery vector, since malicious Office macros are commonly used to drop payloads. Option C removes critical security patches that close the very vulnerabilities ransomware exploits to gain initial access or spread laterally. Option D eliminates your most effective human-layer defense; phishing emails are the #1 ransomware delivery method, so untrained users are easy targets.

Memory tip: Think "UPDATE to PROTECT" - the one action that keeps your defenses current is always the right answer; the distractors all remove a layer of defense rather than adding one.

Topics

#ransomware#antivirus#patch management#malware defense

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice