Which outcome is a direct result of blocking known ransomware URLs?

• A. Telemetry collection service.
• B. Email filtering service.
• C. Cloud storage synchronization.
• D. Ransomware command-and-control servers are blocked.

Answer: (D)

Blocking known ransomware URLs directly interrupts the malware’s ability to reach its command-and-control servers. Ransomware relies on these servers to receive instructions, coordinate encryption, or obtain keys, so preventing access to those URLs stops the attacker’s control channel and hinders the attack from moving forward. The other outcomes aren’t the immediate result of this action: telemetry paths, email-based infection vectors, and cloud storage syncing involve different communication or workflow paths and aren’t the direct consequence of blocking C2 endpoints.