Which statement best describes the primary purpose of a rootkit?

Which statement best describes the primary purpose of a rootkit?

• A. To encrypt files for ransom
• B. To obtain administrator-level access to a computer or computer network
• C. To monitor system temperatures
• D. To block incoming connections

Answer: (B)

Rootkits are designed to hide themselves while giving an attacker persistent, privileged control over a system. The essential goal is to obtain and maintain administrator-level access so the attacker can act with high privileges without being detected, install backdoors, and manipulate or monitor the system over time. This stealthy elevation and persistence is what distinguishes rootkits from other types of malware. Encrypting files for ransom describes ransomware, which aims to monetize access by locking data. Monitoring system temperatures is a legitimate diagnostic task and not the rootkit’s purpose. Blocking incoming connections is something a firewall does or a malware might do to avoid detection, but it does not define the rootkit’s primary function. Therefore, gaining administrator-level access best captures the rootkit’s main purpose.

Rootkits are designed to hide themselves while giving an attacker persistent, privileged control over a system. The essential goal is to obtain and maintain administrator-level access so the attacker can act with high privileges without being detected, install backdoors, and manipulate or monitor the system over time. This stealthy elevation and persistence is what distinguishes rootkits from other types of malware.

Encrypting files for ransom describes ransomware, which aims to monetize access by locking data. Monitoring system temperatures is a legitimate diagnostic task and not the rootkit’s purpose. Blocking incoming connections is something a firewall does or a malware might do to avoid detection, but it does not define the rootkit’s primary function. Therefore, gaining administrator-level access best captures the rootkit’s main purpose.