How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

Question

Options

• ADefeating the scanner from detecting any code change at the kernel
• BReplacing patch system calls with its own version that hides the rootkit (attacker's) actions
• CPerforming common services for the application process and replacing real applications with fake ones
• DAttaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options

• A
  15% (5)
• B
  9% (3)
• C
  3% (1)
• D
  74% (25)

No community discussion yet for this question.