最近、サブネット全体でマルウェアが蔓延し、多数の PC にルートキットがインストールされ、修復作業が無効になり、マルウェアが永続化しました。将来的にルートキットの存在を最もよく検出できるのは次のうちどれですか。
正解:C
EDR (Endpoint Detection and Response) is the most suitable solution among the given options for detecting the presence of a rootkit. EDR solutions continuously monitor and collect data from endpoints, looking for suspicious activities and behavior patterns that might indicate the presence of malware, including rootkits. They also provide tools for investigating and responding to security incidents, making them effective for dealing with sophisticated threats that can evade traditional antivirus solutions.