Refer to the exhibit. An engineer is investigating a case with several employees who cannot access their files on network shares, followed by almost simultaneous delivery of a suspicious email to…

Question

Options

• Adata masking
• Bdata extortion
• Cdata leakage
• Ddata shuffling

• A
  11% (2)
• B
  78% (14)
• C
  6% (1)
• D
  6% (1)

Explanation

Option B is correct because the scenario describes a classic ransomware/data extortion attack: employees lose access to files on network shares (the data has been encrypted or locked by attackers), followed by a mass email delivery (the ransom demand threatening to destroy or publish data unless payment is made). The two events together - disruption of access plus a threatening communication - are the hallmark of data extortion.

Why the distractors are wrong:

• A. Data masking is a defensive technique used to obscure sensitive data in non-production environments - it's not an attack.
• C. Data leakage refers to unauthorized data leaving the organization (exfiltration), but the scenario emphasizes loss of access and a demand, not data being quietly stolen and exposed.
• D. Data shuffling is another anonymization/data-protection method, not a threat type at all.

Memory tip: Think "extortion = blocked + blackmail." If you see two simultaneous events - access disruption AND a suspicious/threatening communication - link it to extortion. Ransomware always has two phases: the lock and the demand.

No community discussion yet for this question.