nerdexam
CompTIA

220-1002 · Question #501

Users have reported their files have disappeared, and they are unable to access local data. The security administrator quarantined all affected systems and removed any remote connectivity; however…

The correct answer is A. Rootkit installation. A rootkit is malware that embeds itself deep within the operating system - often at the kernel level - to hide its presence and intercept system calls. This explains all the symptoms: files appear 'disappeared' because the rootkit hides them from the file system; applications…

Hardware and network troubleshooting

Question

Users have reported their files have disappeared, and they are unable to access local data. The security administrator quarantined all affected systems and removed any remote connectivity; however, users are still unable to access local data PC performance has not been affected, but the applications keep failing. Which of the following has MOST likely occurred?

Options

  • ARootkit installation
  • BData backup failure
  • COS update failure
  • DRansomware attack
  • EBrowser redirection

How the community answered

(29 responses)
  • A
    62% (18)
  • B
    3% (1)
  • C
    21% (6)
  • D
    10% (3)
  • E
    3% (1)

Explanation

A rootkit is malware that embeds itself deep within the operating system - often at the kernel level - to hide its presence and intercept system calls. This explains all the symptoms: files appear 'disappeared' because the rootkit hides them from the file system; applications fail because rootkit hooks intercept and corrupt OS calls; PC performance is largely unaffected because rootkits are designed to be stealthy, not resource-hungry. Critically, removing remote connectivity did NOT resolve the issue, meaning the cause is local and persistent - consistent with a deeply embedded rootkit. Ransomware (D) would have encrypted files and typically displays a ransom note; it also tends to spike CPU/disk during encryption. Data backup failure (B) and OS update failure (C) do not cause files to be hidden or applications to fail. Browser redirection (E) is a network/browser issue unrelated to local file access.

Topics

#rootkit#malware symptoms#system compromise#security incident

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice