Question

What type of rootkit will patch, hook, or replace the version of system call in order to hide information?
Select one:
a. Library level rootkits
b. Kernel level rootkits
c. Application level rootkits
d. System level rootkits

Answer 1

Answer:

Library leve rootkits is the correct answer

Answer 2

(a). "Library level rootkit" patches, hook or replace the version of the system called to hide information.

Rootkit would use patches:

• Permissions and security of user accounts can be changed.
• Normally, only a computer administrator can provide this permission.
• Furthermore, because rootkits aren't designed to propagate by themselves, attackers prefer to use covert means of infection.

Library level rootkits:

• Rootkits are programs that are used to take control of a computer.
• Either legally or illegally. This entails the ability to run files, view logs, and so forth.