What is the primary purpose of blocking known ransomware URLs?

• A. Block known ransomware URLs to disrupt ransomware communication.
• B. Block all external websites.
• C. Require multi-factor authentication for local logins.
• D. Block software updates from vendors.

Answer: (A)

Blocking known ransomware URLs focuses on stopping the malware from reaching its command-and-control and attacker infrastructure. Ransomware often needs to contact these servers to receive instructions, pull updates or components, and exfiltrate data. When access to those URLs is blocked, the malware can’t coordinate its encryption steps or fetch keys and commands, which disrupts its ability to execute and spread, reducing the overall impact of the attack.

The other options miss the point: blocking all external websites is too broad and would disrupt legitimate work; requiring multi-factor authentication for local logins addresses attacker access rather than network communications used by ransomware; and blocking software updates from vendors would prevent critical security fixes, leaving systems more vulnerable.