Ransomware Characteristics and Prevention

1. What does WannaCry primarily spread through?

Windows SMB vulnerability exploitation

USB drive infections only

Bluetooth connections between devices

Printer driver vulnerabilities

2. What is the primary role of endpoint detection and response (EDR) tools?

Monitor and respond to suspicious endpoint activities

Replace firewall functionality

Encrypt all stored data automatically

Eliminate the need for antivirus software

3. Which recovery option is most reliable after a ransomware attack?

Restoring from verified clean backups

Paying the ransom immediately

Waiting for automatic antivirus recovery

Reinstalling applications only

4. True or False: Disabling Windows Defender eliminates all ransomware threats.

True

False

Submit

6. Which control prevents lateral movement after initial ransomware infection?

Network segmentation and access controls

Increasing system clock speed

Installing additional antivirus software

Using colored cables for network connections

7. What is the primary purpose of maintaining system logs in ransomware defense?

Detect suspicious activities and trace infection sources

Automatically delete infected files

Increase network bandwidth

Reduce CPU usage during backups

8. True or False: Ransomware can only infect Windows operating systems.

True

False

Submit

10. Which file type should trigger immediate suspicion when received unexpectedly?

Executable files and scripts (.exe, .vbs, .ps1)

Text documents (.txt, .docx)

Image files (.jpg, .png)

Audio files (.mp3, .wav)

11. What is the primary goal of ransomware attacks?

Encrypt user files and demand payment for decryption

Steal login credentials for social engineering

Monitor user activity without detection

Consume system resources to cause denial of service

12. True or False: User education is unnecessary if technical controls are in place.

True

False

Submit

14. Which security measure directly prevents ransomware execution from email?

Disabling macro execution in Office applications

Increasing monitor brightness

Using a colored password manager

Installing additional RAM

15. What is a key characteristic of locker ransomware?

Locks users out of the system without encrypting files

Only encrypts email attachments

Requires internet connection to spread

Automatically deletes system backups

16. True or False: Paying the ransom guarantees file recovery.

True

False

17. Which backup strategy provides the best protection against ransomware?

Regular offline backups with version history

Continuous cloud sync with automatic updates

Weekly backups stored on the same network

Daily backups connected to primary systems

Submit

19. What does CryptoLocker primarily target?

User documents and media files

Only system registry files

Network router configurations

Firmware in storage devices

20. Which of the following is a common ransomware delivery method?

Phishing emails with malicious attachments

Legitimate software updates from vendors

Hardware manufacturer documentation

Official operating system patches

A+ V14 Ransomware Characteristics and Prevention Quiz

1. What does WannaCry primarily spread through?

2.

What first name or nickname would you like us to use?

2. What is the primary role of endpoint detection and response (EDR) tools?

3. Which recovery option is most reliable after a ransomware attack?

4. True or False: Disabling Windows Defender eliminates all ransomware threats.

5. Ransomware often uses ____-based cryptography to secure encryption keys.

6. Which control prevents lateral movement after initial ransomware infection?

7. What is the primary purpose of maintaining system logs in ransomware defense?

8. True or False: Ransomware can only infect Windows operating systems.

9. Isolating infected systems from the network ____.

10. Which file type should trigger immediate suspicion when received unexpectedly?

11. What is the primary goal of ransomware attacks?

12. True or False: User education is unnecessary if technical controls are in place.

13. Ransomware that exploits unpatched vulnerabilities requires ____.

14. Which security measure directly prevents ransomware execution from email?

15. What is a key characteristic of locker ransomware?

16. True or False: Paying the ransom guarantees file recovery.

17. Which backup strategy provides the best protection against ransomware?

18. Ransomware that encrypts files and displays a ransom demand is classified as ____.

19. What does CryptoLocker primarily target?

20. Which of the following is a common ransomware delivery method?