nerdexam
CompTIA

220-802 · Question #801

Which of the following is the MAIN difference between a rootkit and a virus?

The correct answer is D. Rootkits infiltrate the kernel while viruses infiltrate files. The key distinction between rootkits and viruses is that rootkits operate at the kernel or root level of the OS to conceal themselves, while viruses infect and replicate through user-level files.

Networking

Question

Which of the following is the MAIN difference between a rootkit and a virus?

Options

  • ARootkits encrypt the operating system while viruses encrypt documents
  • BRootkits execute as super user while viruses execute as regular users
  • CRootkits modify the BIOS while viruses cannot access the BIOS
  • DRootkits infiltrate the kernel while viruses infiltrate files

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    14% (7)
  • D
    78% (38)

Why each option

The key distinction between rootkits and viruses is that rootkits operate at the kernel or root level of the OS to conceal themselves, while viruses infect and replicate through user-level files.

ARootkits encrypt the operating system while viruses encrypt documents

Neither rootkits nor viruses are primarily defined by encrypting the OS or documents - encryption is a characteristic of ransomware, not a defining difference between rootkits and viruses.

BRootkits execute as super user while viruses execute as regular users

While rootkits often seek elevated privileges, viruses are not limited to executing as regular users - many viruses can escalate privileges or execute with administrative rights depending on context.

CRootkits modify the BIOS while viruses cannot access the BIOS

BIOS modification is a characteristic of some advanced bootkits (a subtype of rootkit) but is not a defining or common characteristic of rootkits as a whole, and viruses can theoretically access the BIOS under certain conditions.

DRootkits infiltrate the kernel while viruses infiltrate filesCorrect

Rootkits are designed to gain privileged (kernel-level) access to the operating system, allowing them to hide processes, files, and registry entries from the OS and security tools. Viruses, by contrast, attach themselves to executable files or documents and replicate at the user/file level without necessarily requiring elevated system privileges.

Concept tested: Rootkit vs virus kernel-level vs file-level distinction

Source: https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/rootkits-malware

Topics

#rootkit#virus#malware#kernel security

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice