GCED: GIAC Certified Enterprise DefenderDemo

By GIAC · Question Mode

QuestionQ17

Defensive Infrastructure and Tactics

Which of the following is a significant problem attackers commonly face when trying to develop or use a kernel-mode rootkit?

  • A Their effectiveness depends on the specific applications used on the target system.
  • B They tend to corrupt the kernel of the target system, causing it to crash.
  • C They are unstable and are easy to identify after installation
  • D They are highly dependent on the target OS.
Explanation

Kernel-mode rootkits depend heavily on the target operating system because they interact directly with kernel internals, interfaces, and memory structures that differ across operating systems and versions.

Community Discussion

No comments yet. Be the first to start the discussion!