A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the following would best…

The correct answer is C. EDR. EDR (Endpoint Detection and Response) is the most suitable solution among the given options for detecting the presence of a rootkit. EDR solutions continuously monitor and collect data from endpoints, looking for suspicious activities and behavior patterns that might indicate…

Submitted by marco_it· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the following would best detect the presence of a rootkit in the future?

Options

AFDE
BNIDS
CEDR
DDLP

How the community answered

(32 responses)

A
9% (3)
B
3% (1)
C
75% (24)
D
13% (4)

Explanation

EDR (Endpoint Detection and Response) is the most suitable solution among the given options for detecting the presence of a rootkit. EDR solutions continuously monitor and collect data from endpoints, looking for suspicious activities and behavior patterns that might indicate the presence of malware, including rootkits. They also provide tools for investigating and responding to security incidents, making them effective for dealing with sophisticated threats that can evade traditional antivirus solutions.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice