Question

A security administrator is analyzing a user report in which the computer exhibits odd network-related outages. The administrator, however, does not see any suspicious processes running. A prior technician's note indicate the machine has been remediated twice, but the system still exhibits odd behavior. Files were deleted from the system recently. Which of the following is the most likely cause of this behavior?

A. Crypto-malware

B. Rootbit

C. Logic bomb

D. Session hijacking

Answer 1

B. Rootbit