SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What type of malware involves encrypted files and demands payment for a key?

1. Spyware

2. Adware

3. Ransomware

4. Trojans

The correct answer is: Ransomware

The scenario described involves a type of malware that encrypts files on a victim’s system and then demands a ransom payment for the decryption key. This is a characteristic feature of ransomware. Ransomware typically locks the user out of their files or systems, causing significant disruption and potential data loss, and it often demands payment, usually in cryptocurrency, to restore access. Other types of malware do not fit this description. Spyware is designed to collect information from a user’s device without their knowledge. Adware generally shows unwanted advertisements and may track browsing behavior, but it does not encrypt files. Trojans are malware that disguise themselves as legitimate software to trick users into downloading them, but they do not inherently involve file encryption or ransom demands. Thus, the defining characteristic of ransomware as malware that specifically encrypts data and requires payment for access distinguishes it as the correct answer in this context.