Exam 200-201 topic 1 question 18 discussion

The correct answer is B. encryption. Ransomware is a type of malware that encrypts a victim's files and demands payment in exchange for the decryption key. Encryption is the primary evasion technique used by ransomware to avoid detection and protect the malicious code from analysis or reverse-engineering. The other options listed as evasion techniques are not specific to ransomware.

The other options are not specific to ransomware. For example, extended sleep calls are used in a variety of malicious software to slow down the execution of the malware, resource exhaustion is used to overload systems and cause them to crash, and encoding is used to obfuscate payloads. B - encryption is the correct answer because ransomware often encrypts the data of an infected system and demands payment in exchange for the decryption key. This encryption technique is a key aspect of the ransomware threat and is used to evade detection and make it difficult for organizations to recover their data.

The primary evasion technique used by ransomware is encryption. Ransomware encrypts the victim's files, making them inaccessible until a ransom is paid. This encryption is not only a means to hold the data hostage but also serves as an evasion technique because it prevents the data from being easily analyzed or recovered without the decryption key. While extended sleep calls can be used by some malware for evasion, encryption is the hallmark technique of ransomware. The Correct answer seems to be : B

Enryption is not an an evasion technique. It is the primary function of randsomware. The evasion is the extended sleep, in my opinion

B. encryption

I go with B

The correct is B

I go with C.

encryption is not used as an evation technique for ransomware but... it is for other attacks such as trojans or malicious payloads to hide from security mechanisms in ransomware encryption is used as the method to ask for a ransom

B IS CORRECT

The study guide lists the following as evastion techniques against IDS and IPS devices: Fragmentation, low bandwidth attacks, address spoofing/proxying, pattern change evasion, and encryption. Based on that, I think the answer is correct.

I think the question should be "which attack vector is used by randsomeware". As most of the answers aren't really evesion techniques.