Which statement describes the malware threat landscape and defense risk balance?

Which statement describes the malware threat landscape and defense risk balance?

• A. A constant mix of malware families (trojans, worms, ransomware, APTs); defense balances detection, prevention, and response to minimize impact and preserve mission.
• B. Only ransomware is a concern; defense focuses on backups.
• C. Malware is not a factor in cyberspace operations.
• D. Phishing is the sole cause of incidents.

Answer: (A)

Malware threats are diverse, and defense must be aligned with the varying risks they pose. The landscape includes trojans that hide in legitimate software, worms that spread on their own, ransomware that encrypts data, and advanced persistent threats that operate quietly over long periods. Because threats come in many forms and use different techniques, defense cannot rely on a single tactic. Instead, it balances detection, which spots malicious activity as early as possible; prevention, which blocks intrusions and limits attacker efficiency; and response, which contains, eradicates, and recoveries systems to minimize impact and keep critical operations going. This approach helps preserve mission continuity even as attackers adapt and evolve their methods. In practice, safeguards like endpoint protection, network monitoring, timely patching, strong access controls, robust backups, disaster recovery planning, and a clear incident response process all work together to reduce risk. Other options that suggest only one type of threat or dismiss malware altogether don’t reflect how defenses must cover multiple attack paths and emphasize coordinated detection, prevention, and response.

Malware threats are diverse, and defense must be aligned with the varying risks they pose. The landscape includes trojans that hide in legitimate software, worms that spread on their own, ransomware that encrypts data, and advanced persistent threats that operate quietly over long periods. Because threats come in many forms and use different techniques, defense cannot rely on a single tactic. Instead, it balances detection, which spots malicious activity as early as possible; prevention, which blocks intrusions and limits attacker efficiency; and response, which contains, eradicates, and recoveries systems to minimize impact and keep critical operations going. This approach helps preserve mission continuity even as attackers adapt and evolve their methods. In practice, safeguards like endpoint protection, network monitoring, timely patching, strong access controls, robust backups, disaster recovery planning, and a clear incident response process all work together to reduce risk. Other options that suggest only one type of threat or dismiss malware altogether don’t reflect how defenses must cover multiple attack paths and emphasize coordinated detection, prevention, and response.