220-802 · Question #801
Which of the following is the MAIN difference between a rootkit and a virus?
The correct answer is D. Rootkits infiltrate the kernel while viruses infiltrate files. The key distinction between rootkits and viruses is that rootkits operate at the kernel or root level of the OS to conceal themselves, while viruses infect and replicate through user-level files.
Question
Which of the following is the MAIN difference between a rootkit and a virus?
Options
- ARootkits encrypt the operating system while viruses encrypt documents
- BRootkits execute as super user while viruses execute as regular users
- CRootkits modify the BIOS while viruses cannot access the BIOS
- DRootkits infiltrate the kernel while viruses infiltrate files
How the community answered
(49 responses)- A2% (1)
- B6% (3)
- C14% (7)
- D78% (38)
Why each option
The key distinction between rootkits and viruses is that rootkits operate at the kernel or root level of the OS to conceal themselves, while viruses infect and replicate through user-level files.
Neither rootkits nor viruses are primarily defined by encrypting the OS or documents - encryption is a characteristic of ransomware, not a defining difference between rootkits and viruses.
While rootkits often seek elevated privileges, viruses are not limited to executing as regular users - many viruses can escalate privileges or execute with administrative rights depending on context.
BIOS modification is a characteristic of some advanced bootkits (a subtype of rootkit) but is not a defining or common characteristic of rootkits as a whole, and viruses can theoretically access the BIOS under certain conditions.
Rootkits are designed to gain privileged (kernel-level) access to the operating system, allowing them to hide processes, files, and registry entries from the OS and security tools. Viruses, by contrast, attach themselves to executable files or documents and replicate at the user/file level without necessarily requiring elevated system privileges.
Concept tested: Rootkit vs virus kernel-level vs file-level distinction
Source: https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/rootkits-malware
Topics
Community Discussion
No community discussion yet for this question.