Eccouncil Exam 312-49v10 Topic 2 Question 2 Discussion

Actual exam question for Eccouncil's 312-49v10 exam

Question #: 2
Topic #: 2

Which of these rootkit detection techniques function by comparing a snapshot of the file system, boot records, or memory with a known and trusted baseline?

ASignature-Based Detection

BIntegrity-Based Detection

CCross View-Based Detection

DHeuristic/Behavior-Based Detection

Show Suggested Answer

Suggested Answer: B

by Virgina at May 03, 2022, 10:12 AM

Limited Time Offer

25%

Off

Get Premium 312-49v10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!