Cisco Cyber Security Practice Exam

If an organization cannot access its customer database due to encryption and receives a ransom demand, what type of attack is this?

1. Ransomware

2. Spyware

3. Adware

4. Worm

The correct answer is: Ransomware

The situation described in the question falls under the category of ransomware. Ransomware is a type of malicious software designed to block access to a computer system or data until a ransom is paid. In this case, the organization is unable to access its customer database because it has been encrypted by attackers, and they are demanding a ransom to restore access. This specific method of attack is characterized by the encryption of valuable data as a means of extortion. Unlike spyware, which is used to gather information about a person or organization often without their knowledge, or adware, which typically displays unwanted advertisements and is less threatening, ransomware directly impacts the accessibility of critical data, forcing the victim into a position where they must consider paying the ransom. Additionally, worms are self-replicating malware that primarily spreads across networks rather than encrypting data and demanding a ransom. The clear intent to extort payment for decryption is a defining feature of ransomware, making it the correct answer in this scenario.