How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?

Question

Options

• Aby encrypting the disk first.
• Bby utilizing decoy Files.
• Cby retrieving the encryption key.
• Dby patching vulnerable applications.

• A
  6% (4)
• B
  78% (49)
• C
  13% (8)
• D
  3% (2)

Explanation

Cortex XDR agent for Windows prevents ransomware attacks from compromising the file system by utilizing decoy files. Decoy files are randomly generated files that are placed in strategic locations on the endpoint, such as the user's desktop, documents, and pictures folders. These files are designed to look like valuable data that ransomware would target for encryption. When Cortex XDR agent detects that a process is attempting to access or modify a decoy file, it immediately blocks the process and alerts the administrator. This way, Cortex XDR agent can stop ransomware attacks before they can cause any damage to the real files on the endpoint.

No community discussion yet for this question.