Which outcome best describes blocking known ransomware URLs?

• A. Prevents access to all external websites.
• B. Disrupts ransomware communication by blocking connections to known ransomware servers.
• C. Enables automatic file encryption if a threat is detected.
• D. Forces device reboot after any network connection.

Answer: (B)

Blocking known ransomware URLs focuses on cutting off the malware’s ability to talk to its operators. Ransomware often needs to reach command-and-control servers or download components, keys, or updates from remote hosts. When those URLs are blocked, the ransomware cannot receive instructions, relay status, or obtain extra payloads, which disrupts its operation and reduces the chance of encryption or propagation. This approach doesn’t stop all external websites, so legitimate access remains possible, and it doesn’t automatically encrypt files or force reboots—that would be incorrect outcomes.