nerdexam
CompTIA

220-1002 · Question #848

A user calls the help desk to report issues with a computer. Earlier in the day, the user received an email with a link to a document to download. Nothing happened immediately after the user…

The correct answer is D. ransomware. This scenario exhibits all the hallmark indicators of ransomware: delivery via a malicious email link, a delay before activation (to evade immediate detection), files renamed with an encryption extension (.enc), and a ransom note with instructions for obtaining the decryption…

Hardware and network troubleshooting

Question

A user calls the help desk to report issues with a computer. Earlier in the day, the user received an email with a link to a document to download. Nothing happened immediately after the user downloaded the document, but the computer then began to respond slowly. Applications also started to crash. The help desk technician discovers many of the user's files and applications have been renamed with .enc at the end. There is also a .txt file on the desktop with instructions on how to obtain the encryption key. This is an example of:

Options

  • Aa virus.
  • Bspam.
  • Cspyware.
  • Dransomware.

How the community answered

(40 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    95% (38)

Explanation

This scenario exhibits all the hallmark indicators of ransomware: delivery via a malicious email link, a delay before activation (to evade immediate detection), files renamed with an encryption extension (.enc), and a ransom note with instructions for obtaining the decryption key. A virus replicates and damages files but does not typically encrypt them for ransom. Spam is unsolicited email. Spyware silently collects user data. Ransomware's defining characteristic is encrypting victim data and demanding payment for restoration.

Topics

#ransomware#.enc extension#file encryption#malware identification

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice