CompTIA Network+ Practice Test

What does ransomware typically do to a user’s data?

1. Deletes the data permanently

2. Encrypts the data and demands a ransom for decryption

3. Copies the data to another location

4. Corrupts the data irreversibly

The correct answer is: Encrypts the data and demands a ransom for decryption

Ransomware is a type of malicious software that primarily focuses on obtaining ransom from users by encrypting their data. When ransomware infects a system, it typically encrypts files and makes them inaccessible to the user. In order to regain access to their data, the user is then presented with a demand for payment, usually in cryptocurrencies, to receive a decryption key. This method of operation creates significant stress for the victim, as they face a dilemma of potentially losing valuable data or paying the ransom without any guarantee of recovery. The other options describe actions that are either not typically associated with ransomware or do not align with its primary function. For instance, permanently deleting data or corrupting it irreversibly are not direct strategies used by ransomware, as the main goal is to leverage the encrypted data for financial gain rather than outright destruction. Similarly, while copying data does occur in some other types of malware, it is not a characteristic feature of ransomware, which focuses on encryption and extorting the user for access.