Which term refers to deploying fake files to catch ransomware?

• A. Fileless Attacks
• B. Endpoint Security Trials
• C. Decoy Files
• D. Service Provider Accounts

Answer: (C)

Decoy files are a deception technique used to trap ransomware. By placing harmless, realistic-looking files on endpoints, defenders lure ransomware into accessing or encrypting them. If the malware hits these decoys, security tools can detect the suspicious activity, raise alerts, and often stop the attack before real data is affected. The decoys also provide forensic signals about how the ransomware behaves. This approach is part of broader deception strategies in endpoint protection. Other options don’t fit because they describe unrelated concepts: fileless attacks operate in memory without files, trials are about software evaluation, and service provider accounts are not related to ransomware detection.