nerdexam
GIAC

GCIH · Question #166

Jane works as a Consumer Support Technician for ABC Inc. The company provides troubleshooting support to users. Jane is troubleshooting the computer of a user who has installed software that…

The correct answer is A. Rootkits. Rootkits are malware that automatically escalate to full system privileges and conceal their presence within the operating system.

Malware Analysis & Advanced Persistent Threats

Question

Jane works as a Consumer Support Technician for ABC Inc. The company provides troubleshooting support to users. Jane is troubleshooting the computer of a user who has installed software that automatically gains full permissions on his computer. Jane has never seen this software before. Which of the following types of malware is the user facing on his computer?

Options

  • ARootkits
  • BViruses
  • CSpyware
  • DAdware

How the community answered

(53 responses)
  • A
    92% (49)
  • B
    2% (1)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Rootkits are malware that automatically escalate to full system privileges and conceal their presence within the operating system.

ARootkitsCorrect

Rootkits are specifically engineered to obtain root or administrator-level permissions on a compromised system automatically upon execution. They accomplish this by hooking into core OS components or replacing system binaries, giving them persistent, unrestricted control over the machine. This behavior - automatically gaining full permissions and hiding from normal detection - is the defining characteristic of a rootkit.

BViruses

Viruses replicate by attaching to legitimate files and spreading to other systems, but their primary function is propagation rather than automatically escalating to full system permissions.

CSpyware

Spyware covertly monitors and exfiltrates user data to a third party without consent, but does not automatically obtain full administrative privileges on the host.

DAdware

Adware displays unwanted advertisements and may track browsing behavior for ad targeting, but it does not automatically elevate itself to full system permissions.

Concept tested: Rootkit malware privilege escalation behavior

Source: https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/rootkits-malware

Topics

#rootkits#malware types#privilege escalation#stealth software

Community Discussion

No community discussion yet for this question.

Full GCIH Practice