210-250 · Question #139
Which evasion method servers as an important functionality of ransomware?
The correct answer is B. Encryption. Encryption is the core mechanism of ransomware-it is used both as the attack payload (encrypting the victim's files to make them inaccessible) and as an evasion technique (encrypting malicious code or C2 communications to bypass signature-based detection and network inspection…
Question
Which evasion method servers as an important functionality of ransomware?
Options
- AEncoding
- BEncryption
- CResource exhaustion
- DExtended sleep calls
How the community answered
(24 responses)- A4% (1)
- B79% (19)
- C13% (3)
- D4% (1)
Explanation
Encryption is the core mechanism of ransomware-it is used both as the attack payload (encrypting the victim's files to make them inaccessible) and as an evasion technique (encrypting malicious code or C2 communications to bypass signature-based detection and network inspection tools). By encrypting its payload, ransomware can evade antivirus scanners that rely on known byte signatures. Encoding (A) is a reversible data transformation with no cryptographic security and is a weaker evasion method. Resource exhaustion (C) is a denial-of-service technique, not an evasion method. Extended sleep calls (D) are used to evade sandbox analysis by outlasting the sandbox's analysis window, but this is not the primary or defining evasion technique associated with ransomware.
Topics
Community Discussion
No community discussion yet for this question.