Compare ransomware, data theft, and active exploitation, and identify a planning consideration for each.

### The concept These threat types differ in what the attacker does. Ransomware blocks access to files or systems and demands a ransom, but payment may not restore access. Data theft focuses on stealing information stored on servers or devices and is commonly enabled by stolen user credentials. Active exploitation uses a vulnerability in software, hardware, or another part of the environment to gain control. Planning should match response measures to the threat, including backup and recovery preparation, attention to unauthorized access, and temporary connectivity restrictions when active exploitation is being mitigated. ### What a good answer covers - Defines each threat type accurately and distinguishes its mechanism. - Notes that ransomware payment does not guarantee restored access. - Connects data theft to stored information and stolen credentials. - Connects active exploitation to vulnerabilities and suitable temporary restrictions. ### Terms - **Credential**: Information used to verify a user's identity or access, such as login details. - **Active exploitation**: Taking advantage of a vulnerability to gain control of systems, networks, or devices. ### Remember Match the response to the method: locked access, stolen information, or exploited weakness.