ITPEC IP October 2023 Question 42
Which of the following is a term for software that encrypts files on a computer in order to make them unusable, and demands money or other valuables in exchange for the decryption key?
Explanation
Ransomware — malware that encrypts files and demands money in exchange for the decryption key.
Ransomware typically arrives through an e-mail attachment, a malicious website or an unpatched vulnerability. It encrypts documents and other files, then displays a demand for payment, often in cryptocurrency, to release the key. Paying does not guarantee that the files are recovered.
Answer (b)
Why not others:
- •(a) Keylogger — records keystrokes to steal passwords and other input
- •(c) Rootkit — a set of tools that hides an intruder's presence and keeps administrator access to the system
- •(d) Worm — malware that copies itself across networks on its own, without needing a host file
Key rule: The main defence against ransomware is regular backups kept apart from the computer, since it can also encrypt any drive that stays connected.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.