Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 2 Question 52 Discussion

Posted by Valentin on Sep 16, 2024 at 06:53 PM

Which of the following is a major problem that attackers often encounter when attempting to develop or use a kernel mode rootkit?

Suggested Answer: C

Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface on the device.


Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
36 comments · newest first
TA
Tamesha 10 months ago
Wait, are they really that easy to spot after installation?
JO
Johnna 11 months ago
B is a big issue, crashing the kernel is a major risk!
AB
Abel 11 months ago
I thought they were mostly stable once installed?
KR
Kristel 11 months ago
Totally agree, the OS version matters a lot too!
TH
Theola 11 months ago
A rootkit's effectiveness really does depend on the target apps.
EL
Elinore 11 months ago
I vaguely recall something about how rootkits can be affected by the applications on the system. Maybe option A is relevant, but I'm leaning towards D being more accurate.
DO
Donette 12 months ago
I practiced a similar question where we discussed the stability of rootkits. I think option C makes sense because they can be unstable and detectable.
CA
Carmela 12 months ago
I'm not entirely sure, but I feel like option B could be a problem too. If they corrupt the kernel, that would definitely cause issues.
JO
Jovita 12 months ago
I remember studying that kernel mode rootkits can be really tricky because they interact directly with the operating system. I think option D might be the right answer since they depend on the target OS.
SI
Sina 12 months ago
Hmm, I'm not sure about this one. The options all seem plausible, but I'll need to weigh the pros and cons of each before making a decision.
MI
Miss 12 months ago
I'm pretty confident I know the answer to this one. Kernel mode rootkits are highly dependent on the target OS, so option D seems like the best choice.
QU
Quentin 12 months ago
Okay, I've got a strategy here. I know that kernel mode rootkits are designed to operate at the lowest level of the system, so I'll focus on options that relate to the challenges of that approach.
SO
Soledad 1 year ago
I'm a bit confused by this question. What exactly do they mean by "major problem" that attackers encounter? I'll need to read through the options more closely.
EM
Emile 1 year ago
Hmm, this seems like a tricky one. I'll have to think carefully about the different options and how they relate to kernel mode rootkits.
LA
Lashunda 1 year ago
I'm a bit confused by the options. I'll need to double-check the RADIUS authentication settings and user role definitions to make sure I select the correct choices.
HO
Honey 1 year ago
Well, I guess the attackers really need to do their homework on the target OS. Option D sounds like the way to go if you want to avoid a nasty kernel corruption surprise.
FA
Fausto 1 year ago
↳ replying to Honey
User 3: Their effectiveness really depends on the OS they are targeting.
LE
Leanna 1 year ago
↳ replying to Honey
User 2: Yeah, attackers really need to be careful with the target OS.
DE
Della 1 year ago
↳ replying to Honey
User 1: Option D sounds like the way to go if you want to avoid a nasty kernel corruption surprise.
ME
Meaghan 1 year ago
I'm going with option A. Those pesky rootkits never seem to work quite right on my system. Must be the special apps I use. *wink wink*
BU
Buck 1 year ago
Haha, I bet the attackers wish they could just use a nice, stable rootkit that doesn't crash the system. Option B sounds like a classic case of 'rootkit, meet BSOD'.
IR
Irma 1 year ago
↳ replying to Buck
D) They are highly dependent on the target OS.
AN
Annice 1 year ago
↳ replying to Buck
C) They are unstable and are easy to identify after installation
NA
Nadine 1 year ago
↳ replying to Buck
B) They tend to corrupt the kernel of the target system, causing it to crash.
GA
Gabriele 1 year ago
↳ replying to Buck
A) Their effectiveness depends on the specific applications used on the target system.
MO
Mollie 1 year ago
I disagree, I think option C is the correct answer. Kernel mode rootkits are known to be unstable and easy to detect after installation, which makes them a major problem for attackers.
FI
Fidelia 1 year ago
↳ replying to Mollie
C) They are unstable and are easy to identify after installation
MA
Maryrose 1 year ago
↳ replying to Mollie
B) They tend to corrupt the kernel of the target system, causing it to crash.
OR
Ora 1 year ago
↳ replying to Mollie
A) Their effectiveness depends on the specific applications used on the target system.
JE
Jettie 1 year ago
I think option D is the correct answer. Kernel mode rootkits are highly dependent on the target OS, and will not work on systems with different kernel versions or architectures.
MI
Miriam 1 year ago
↳ replying to Jettie
C) They are unstable and are easy to identify after installation
ST
Stephane 1 year ago
↳ replying to Jettie
B) They tend to corrupt the kernel of the target system, causing it to crash.
LA
Lamar 1 year ago
↳ replying to Jettie
A) Their effectiveness depends on the specific applications used on the target system.
ST
Stephaine 2 years ago
But don't you think that attackers also struggle with the fact that rootkits can be unstable and easy to identify after installation?
WI
Willie 2 years ago
I agree with Stefany. If the target OS changes, the rootkit may not work properly.
ST
Stefany 2 years ago
I think the major problem attackers face is that kernel mode rootkits are highly dependent on the target OS.
0/2000 characters

Save Cancel