220-1002 · Question #501
Users have reported their files have disappeared, and they are unable to access local data. The security administrator quarantined all affected systems and removed any remote connectivity; however…
The correct answer is A. Rootkit installation. A rootkit is malware that embeds itself deep within the operating system - often at the kernel level - to hide its presence and intercept system calls. This explains all the symptoms: files appear 'disappeared' because the rootkit hides them from the file system; applications…
Question
Users have reported their files have disappeared, and they are unable to access local data. The security administrator quarantined all affected systems and removed any remote connectivity; however, users are still unable to access local data PC performance has not been affected, but the applications keep failing. Which of the following has MOST likely occurred?
Options
- ARootkit installation
- BData backup failure
- COS update failure
- DRansomware attack
- EBrowser redirection
How the community answered
(29 responses)- A62% (18)
- B3% (1)
- C21% (6)
- D10% (3)
- E3% (1)
Explanation
A rootkit is malware that embeds itself deep within the operating system - often at the kernel level - to hide its presence and intercept system calls. This explains all the symptoms: files appear 'disappeared' because the rootkit hides them from the file system; applications fail because rootkit hooks intercept and corrupt OS calls; PC performance is largely unaffected because rootkits are designed to be stealthy, not resource-hungry. Critically, removing remote connectivity did NOT resolve the issue, meaning the cause is local and persistent - consistent with a deeply embedded rootkit. Ransomware (D) would have encrypted files and typically displays a ransom note; it also tends to spike CPU/disk during encryption. Data backup failure (B) and OS update failure (C) do not cause files to be hidden or applications to fail. Browser redirection (E) is a network/browser issue unrelated to local file access.
Topics
Community Discussion
No community discussion yet for this question.