Palo Alto Networks PCDRA Exam - Topic 7 Question 73 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 73
Topic #: 7

What motivation do ransomware attackers have for returning access to systems once their victims have paid?

AThere is organized crime governance among attackers that requires the return of access to remain in good standing. B. Nation-states enforce the return of system access through the use of laws and regulation.

CFailure to restore access to systems undermines the scheme because others will not believe their valuables would be returned.

DThe ransomware attackers hope to trace the financial trail back and steal more from traditional banking institutions. -

Show Suggested Answer

Suggested Answer: C

Ransomware attackers have a motivation to return access to systems once their victims have paid because they want to maintain their reputation and credibility. If they fail to restore access to systems, they risk losing the trust of future victims who may not believe that paying the ransom will result in getting their data back. This would reduce the effectiveness and profitability of their scheme. Therefore, ransomware attackers have an incentive to honor their promises and decrypt the data after receiving the ransom.Reference:

What is the motivation behind ransomware? | Foresite

As Ransomware Attackers' Motives Change, So Should Your Defense - Forbes

by Graciela at Feb 11, 2025, 01:53 PM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jody

3 months ago

Wait, they actually return access? I thought it was a scam!

upvoted 0 times

...

Shantay

3 months ago

B seems far-fetched, I don't see nation-states getting involved.

upvoted 0 times

...

Norah

3 months ago

A is interesting, organized crime does have its rules.

upvoted 0 times

...

My

4 months ago

Really? I doubt they care about trust at all.

upvoted 0 times

...

Taryn

4 months ago

C makes the most sense, gotta keep the trust.

upvoted 0 times

...

Lashawna

4 months ago

I practiced a question similar to this, and I think the attackers need to keep their victims believing in the system, which points to C again.

upvoted 0 times

...

Sarina

4 months ago

I feel like option D could be a possibility too, but it seems more focused on banking rather than the immediate ransomware issue.

upvoted 0 times

...

Lashanda

4 months ago

I'm not entirely sure, but I remember something about organized crime needing to maintain trust among their victims. Maybe A is correct?

upvoted 0 times

...

Ling

5 months ago

I think option C makes the most sense since if they don't return access, it could ruin their reputation and future profits.

upvoted 0 times

...

Ria

5 months ago

Okay, I think I've got it. The answer is C - if the attackers don't return access, it undermines their whole scheme and makes people less likely to pay in the future. That makes sense to me.

upvoted 0 times

...

Oliva

5 months ago

Hmm, I'm not sure about this one. The options seem a bit vague. I'll have to read through them again and see if I can spot any clues about the attackers' motivations.

upvoted 0 times

...

Kayleigh

5 months ago

I'm a bit confused by this question. The options don't seem to directly address the motivation for returning access. I'll need to think this through carefully.

upvoted 0 times

...

Argelia

5 months ago

This is a tricky one, but I think the key is to focus on the motivations of the ransomware attackers. The options seem to suggest it's about maintaining their reputation and credibility.

upvoted 0 times

...

Jennie

12 months ago

Option B is a joke, right? As if nation-states are going to enforce anything when it comes to these shadowy ransomware groups.

upvoted 0 times

...

Gilma

12 months ago

Hah! Option D is just wishful thinking. These criminals are more interested in lining their own pockets than trying to steal from banks.

upvoted 0 times

...

Jesus

12 months ago

Option C makes the most sense to me. Restoring access is key to maintaining the illusion that they'll actually return your files if you pay up.

upvoted 0 times

Gilma

11 months ago

User 2

upvoted 0 times

...

Shaquana

12 months ago

User 1

upvoted 0 times

...

Hassie

1 year ago

But what about the financial trail? Could attackers be hoping to steal more from traditional banking institutions?

upvoted 0 times

...

Vernice

1 year ago

I agree with Cecily. It's important for attackers to maintain good standing within the criminal network.

upvoted 0 times

...

Cecily

1 year ago

I think ransomware attackers return access to systems because of organized crime governance.

upvoted 0 times

...

Helaine

1 year ago

Why would ransomware attackers care about their 'good standing' in an organized crime syndicate? That's just ridiculous!

upvoted 0 times

Pamella

1 year ago

D) The ransomware attackers hope to trace the financial trail back and steal more from traditional banking institutions.

upvoted 0 times

...

Pamella

1 year ago

C) Failure to restore access to systems undermines the scheme because others will not believe their valuables would be returned.

upvoted 0 times

...