EC-Council
EC0-350 · Question #240
EC0-350 Question #240: Real Exam Question with Answer & Explanation
Sign in or unlock EC0-350 to reveal the answer and full explanation for question #240. The question stem and answer options stay visible for context.
Question
How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?
Options
- ADefeating the scanner from detecting any code change at the kernel
- BReplacing patch system calls with its own version that hides the rootkit (attacker's) actions
- CPerforming common services for the application process and replacing real applications with fake ones
- DAttaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options
Unlock EC0-350 to see the answer
You've previewed enough free EC0-350 questions. Unlock EC0-350 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.