Go back to 050-SEPROSIEM-01 - RSA Certified SE Professional in Security Information and Event Management

Question :-

Which two (2) actions might a rootkit perform? (Choose TWO.)
Monitor disk activity on the root volume.
Install security tools in root's home directory.
Provide remote access to a computer by opening ports.
Hide its presence by installing modified versions of system commands
Provide a set of tools that allow the system administrator to monitor security events.

Want to practice for 050-SEPROSIEM-01 - RSA Certified SE Professional in Security Information and Event Management ? Click here.