ITPEC FE Morning October 2019 Question 45

Rootkit — malware that gains unauthorized privileged access, hides its presence, and performs malicious activities.

Key characteristics of a rootkit:
- Operates at root/administrator level — the name literally means "root access toolkit"
- Hides itself from detection by modifying OS components (processes, files, registry)
- Enables persistent backdoor access for attackers

Why not others:
- (a) Botnet — a network of compromised machines controlled remotely, not about hiding or privileged access
- (b) Ransomware — encrypts files and demands payment; intentionally visible to the victim
- (d) Security hole — a vulnerability in software, not a type of malware

Key rule: If a question mentions all three traits — privileged access, hiding presence, and malicious activity — the answer is always rootkit.

AI-generated — may contain errors