What describes the usage of a rootkit in endpoint-based attacks?

Remote code execution causing denial-of-service is a specific type of attack outcome, but not the primary definition or usage of a rootkit, which is focused on stealth and persistence.

While an exploit might be used to install a rootkit, a rootkit itself is not an exploit; it's a post-exploitation tool for maintaining control and stealth.

Rootkits are used to gain and maintain privileged access (often root/administrator) and conceal activity, not to disable root access for the attacker.

Rootkits are stealthy sets of tools or programs that, once installed on a compromised system, allow an attacker to maintain persistent access and control while actively concealing their presence and malicious activities from the operating system and security software. They achieve this by modifying core system utilities or kernel functions to hide processes, files, and network connections.