nerdexam
LPI

303-300 · Question #31

What is the purpose of rkhunter?

The correct answer is B. To detect rootkits and other security threats. rkhunter (Rootkit Hunter) is a Unix/Linux security tool designed to scan systems for rootkits, backdoors, and local exploits - making B correct. It checks for suspicious file permissions, hidden files, and known rootkit signatures to alert administrators of potential…

Host Security

Question

What is the purpose of rkhunter?

Options

  • ATo manage system log files
  • BTo detect rootkits and other security threats
  • CTo manage installed packages
  • DTo automate host scans

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    88% (35)
  • C
    8% (3)
  • D
    3% (1)

Explanation

rkhunter (Rootkit Hunter) is a Unix/Linux security tool designed to scan systems for rootkits, backdoors, and local exploits - making B correct. It checks for suspicious file permissions, hidden files, and known rootkit signatures to alert administrators of potential compromises.

  • A is wrong - Log file management is handled by tools like logrotate, not rkhunter.
  • C is wrong - Package management belongs to tools like apt, yum, or dnf.
  • D is wrong - Automated host scanning is the domain of tools like Nessus or OpenVAS; rkhunter scans only the local host and is not an automated scheduler itself.

Memory tip: Break down the name - rk = rootkit, hunter = it hunts them. If you see "rootkit" in an answer choice, that's your signal.

Topics

#rootkit detection#host security#malware detection#system hardening

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice