nerdexam
EC-Council

312-50V13 · Question #126

_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

The correct answer is B. RootKit. A rootkit is a malicious software package designed to conceal its presence and activities, as well as those of other malicious programs, by modifying operating system behavior.

Submitted by luis.pe· Mar 6, 2026Malware Threats

Question

_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

Options

  • ATrojan
  • BRootKit
  • CDoS tool
  • DScanner
  • EBackdoor

How the community answered

(56 responses)
  • B
    89% (50)
  • C
    2% (1)
  • D
    4% (2)
  • E
    5% (3)

Why each option

A rootkit is a malicious software package designed to conceal its presence and activities, as well as those of other malicious programs, by modifying operating system behavior.

ATrojan

A Trojan horse is malware disguised as legitimate software, but its primary function isn't necessarily to hide its presence and the presence of other malware in the ways a rootkit does.

BRootKitCorrect

Rootkits are specifically designed to maintain stealthy access to a computer. They achieve this by modifying low-level operating system functions to prevent detection of malicious processes in the task list, hide files from the file system, obscure registry entries, and often include keylogging capabilities to intercept keystrokes without being noticed.

CDoS tool

A DoS (Denial of Service) tool is used to disrupt network services, not to hide processes or files on an infected host.

DScanner

A scanner is used to identify vulnerabilities or open ports on a system or network, not to hide malicious activity.

EBackdoor

A backdoor provides an alternative means of access to a system, but it doesn't inherently include the comprehensive stealth and hiding capabilities of a rootkit.

Concept tested: Rootkit characteristics and capabilities

Source: https://learn.microsoft.com/en-us/security/compass/incident-response-playbook-malware#rootkit

Topics

#rootkit#malware#process hiding#stealth

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice