Information Technology Specialist (ITS) Cybersecurity Practice Exam

What is a type of malware that encrypts a target's hard drive content?

1. Spyware

2. Ransomware

3. Adware

4. Rootkit

The correct answer is: Ransomware

Ransomware is specifically designed to encrypt the data on a victim's hard drive, rendering it inaccessible until a ransom is paid to the attacker. This type of malware typically enters a system through phishing emails, malicious downloads, or vulnerabilities in software. Once it executes, it starts encrypting files or entire drives, and the user is then presented with a ransom note demanding payment in exchange for a decryption key. The characteristics of ransomware, such as its ability to hold data hostage and its focus on financial gain for the attacker, clearly differentiate it from other types of malware. Spyware, while it gathers information about users without their consent, does not encrypt data. Adware primarily serves to display advertisements to users, often resulting in a cluttered experience but not encryption of data. A rootkit is a type of malicious software that is designed to gain unauthorized access and control over a computer system, often without detection, but it does not encrypt data either. Ransomware's specific function of encrypting data for extortion makes it the correct answer in this context.