Blocking known ransomware URLs primarily prevents endpoints from connecting to which type of resource?

• A. Local storage device.
• B. Cloud update service.
• C. Command and control servers.
• D. User email client.

Answer: (C)

Blocking known ransomware URLs mainly prevents endpoints from connecting to command-and-control servers. Ransomware relies on these servers to receive instructions, obtain encryption keys, and coordinate its actions. When those outbound connections are blocked, the malware can’tfully communicate with its operator, hindering its ability to run or complete the encryption process. While ransomware may use other avenues like local storage or email for distribution, the ongoing control and coordination typically occur through C2 servers, making them the key resource blocked by URL filtering.