CCIE Security (legacy) — Question 3

Which statement best describes the concepts of rootkits and privilege escalation?

Answer options

• A. Rootkits propagate themselves.
• B. Privilege escalation is the result of a rootkit.
• C. Rootkits are a result of a privilege escalation.
• D. Both of these require a TCP port to gain access.

Correct answer: B

Explanation

The correct answer, B, highlights that privilege escalation can occur as a consequence of a rootkit's presence, allowing unauthorized access. Options A and C misrepresent the relationship by suggesting that rootkits either self-propagate or result from privilege escalation, which is incorrect. Option D is also inaccurate, as neither rootkits nor privilege escalation inherently requires a TCP port for access.