FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

By Fortinet · Question Mode

QuestionQ11

VerifiedSecurity Management

A security analyst reviews a scan job report that identifies a true positive match. The report shows that the malware attempts to replace critical system executables.

Which malware type is the analyst observing?

Explanation

A rootkit commonly modifies or replaces critical system components and executables to hide malicious activity, maintain persistence, and obtain or preserve privileged access.

Community Discussion

No comments yet. Be the first to start the discussion!