nerdexam
GIAC

GCIH · Question #558

From the choices below, which type of defense is the best way to protect against User-Mode RootKits?

The correct answer is D. Proactive. The best way to defend against User-Mode RootKits is to be proactive. You should use a file system integrity checking tool. Such tools can create a read-only database of cryptographic hashes for critical system files. Being corrective, directive, and reactive only help after…

Malware Analysis & Advanced Persistent Threats

Question

From the choices below, which type of defense is the best way to protect against User-Mode RootKits?

Options

  • AReactive
  • BDirective
  • CResponsive
  • DProactive
  • ECorrective

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    85% (44)
  • E
    8% (4)

Explanation

The best way to defend against User-Mode RootKits is to be proactive. You should use a file system integrity checking tool. Such tools can create a read-only database of cryptographic hashes for critical system files. Being corrective, directive, and reactive only help after the fact and do not deter hackers from installing User-Mode RootKits.

Topics

#user-mode rootkit#proactive defense#rootkit mitigation

Community Discussion

No community discussion yet for this question.

Full GCIH Practice