MENU
Which of the following types of rootkits replaces regular application binaries with Trojan fakes and modifies the behavior of existing applications using hooks, patches, or injected code?
Suggested Answer: A
Get Premium GCIH Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
HE
Hester
3 months ago
But what about C) Kernel level rootkit? It also alters system behavior.
LE
Leoma
3 months ago
I agree, A) sounds right. It modifies apps directly.
MI
Mindy
3 months ago
I think it's A) Application level rootkit. It makes sense with the description.
EL
Elvis
3 months ago
Really? I didn’t know application level rootkits could do that!
RE
Renea
3 months ago
I thought Boot loader rootkits were more common, but this makes sense.
BE
Becky
4 months ago
Wait, are we sure it’s not Kernel level? That one’s tricky!
JU
Jules
5 months ago
Totally agree, it’s all about those application binaries.
NO
Noble
5 months ago
A) Application level rootkit is the right answer!
HO
Honey
6 months ago
I’m leaning towards A as well, but I keep mixing up the definitions of the different types. I should have reviewed those examples more thoroughly.
YO
Yoko
6 months ago
I’m a bit confused between application level and kernel level rootkits. They both seem to modify behavior, but I feel like application level is more about the binaries.
BE
Ben
6 months ago
I remember practicing a question like this, and I think the answer was related to how the rootkit interacts with applications. Could it be A?
TR
Tracey
6 months ago
I think this might be the application level rootkit, but I'm not entirely sure. It sounds familiar from the study materials.