To invisibly maintain access to a machine, an attacker utilizes a rootkit that sits undetected in the core components of the operating system. What is this type of rootkit an example of?
A. Firmware rootkit
Resides in the firmware (e.g., BIOS, UEFI) of hardware components. It operates below the OS, not in the core OS components.
B. Kernel rootkit
Operates at the kernel level — the core of the operating system. This gives it high-level privileges, allowing it to hide files, processes, and system activities; intercept system calls and manipulate outputs; and maintain stealthy, persistent access to the compromised system. Because it integrates into the core components of the OS, it is very difficult to detect and remove.
C. Hypervisor rootkit
Runs beneath the operating system, on the virtualization layer (hypervisor). It controls the OS by intercepting hardware calls — more advanced and rare.
D. Hardware rootkit
Embedded in the actual hardware or device firmware, such as network cards or hard drives. It's even lower-level than firmware rootkits.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
e020fdc
1 month, 1 week ago