John works as a professional Ethical Hacker. He is assigned a project to test the security of Which of the following statements are true about rootkits? Each correct answer represents a complete solution. Choose all that apply.

Question

Accepted Answer

B. They allow an attacker to set a Trojan in the operating system and thus open a backdoor Rootkits commonly install Trojans and create backdoors within the OS kernel or system files, giving the attacker persistent remote access that survives reboots and initial vulnerability remediation. C. They allow an attacker to replace utility programs that can be used to detect the attacker's A defining capability of rootkits is replacing or patching legitimate OS utilities such as ls, ps, and netstat with malicious versions that omit attacker-controlled files and processes from output, defeating standard detection methods. D. They allow an attacker to run packet sniffers secretly to capture passwords. Rootkits can install packet sniffers at the kernel level and run them invisibly outside the OS process list, silently capturing plaintext credentials and sensitive network traffic.

Answer

A. They allow an attacker to conduct a buffer overflow. Buffer overflow is an exploitation technique used to gain initial code execution or escalate privileges before rootkit installation - the rootkit itself operates after exploitation has already succeeded and does not perform buffer overflows.

John works as a professional Ethical Hacker. He is assigned a project to test the security of Which of the following statements are true about rootkits? Each correct answer represents a complete…

Question

Options

How the community answered

Why each option

Topics

Community Discussion