SY0-501 · Question #242
Which of the following types of attacks precedes the installation of a rootkit on a server?
The correct answer is C. Privilege escalation. Rootkits require high-level system access for installation, making privilege escalation a critical precursor attack to gain the necessary permissions.
Question
Which of the following types of attacks precedes the installation of a rootkit on a server?
Options
- APharming
- BDDoS
- CPrivilege escalation
- DDoS
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C85% (23)
- D4% (1)
Why each option
Rootkits require high-level system access for installation, making privilege escalation a critical precursor attack to gain the necessary permissions.
Pharming is a technique used to redirect a user to a fraudulent website, which is unrelated to gaining access or installing malware directly on a server.
A Distributed Denial-of-Service (DDoS) attack aims to overwhelm a server or service with traffic to disrupt its availability, not to install malware.
Rootkits are stealthy malware designed to hide their presence and often other malicious software on a system, requiring deep integration with the operating system kernel or critical system components. To achieve this deep integration and maintain persistence, an attacker typically needs administrative or system-level privileges; therefore, a privilege escalation attack is often performed first to gain the necessary elevated permissions for successful rootkit installation.
A Denial-of-Service (DoS) attack aims to make a service or resource unavailable to legitimate users, which is not a step in installing a rootkit.
Concept tested: Rootkit installation prerequisites and attack methodology
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/intelligence/rootkits
Topics
Community Discussion
No community discussion yet for this question.