How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

Question

Options

• ADefeating the scanner from detecting any code change at the kernel
• BReplacing patch system calls with its own version that hides the rootkit (attacker's) actions
• CPerforming common services for the application process and replacing real applications with fake ones
• DAttaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options

• A
  4% (1)
• B
  8% (2)
• C
  4% (1)
• D
  85% (22)

No community discussion yet for this question.