A critical CVSS 9.0 vulnerability allowing remote code execution requires immediate remediation.
Applying the vendor-recommended patch as soon as possible directly eliminates the exploit vector, which is the highest priority action to reduce risk, with the reboot completed during the next available maintenance window to finalize the fix.

Kernel-mode rootkits run with the best operating system privileges (Ring 0) by adding code or replacement parts of the core operating system, as well as each the kernel and associated device drivers. Most operative systems support kernel-mode device drivers, that execute with a similar privileges because the software itself.
As such, several kernel-mode rootkits square measure developed as device drivers or loadable modules, like loadable kernel modules in Linux or device drivers in Microsoft Windows. This category of rootkit has unrestricted security access, however is tougher to jot down. The quality makes bugs common, and any bugs in code operative at the kernel level could seriously impact system stability, resulting in discovery of the rootkit. one amongst the primary wide familiar kernel rootkits was developed for Windows NT four.0 and discharged in Phrack magazine in 1999 by Greg Hoglund. Kernel rootkits is particularly tough to observe and take away as a result of they operate at a similar security level because the software itself, and square measure therefore able to intercept or subvert the foremost sure software operations. Any package, like antivirus package, running on the compromised system is equally vulnerable. during this scenario, no a part of the system is sure.

The activity described is active footprinting because you are not merely listening for wireless broadcasts; you are transmitting crafted 802.11 management frames to elicit responses and gather information. In Wi-Fi reconnaissance, passive methods rely on monitoring beacon frames and other naturally occurring traffic.
Active methods, by contrast, deliberately interact with the environment-often by sending probe requests or other management frames-to prompt access points or client devices to respond with details such as SSID, supported data rates, security capabilities, and other parameters.
The scenario explicitly states you "actively send crafted management frames" and then log "immediate responses (including probe responses and capability information)." That is the defining difference between active and passive wireless footprinting. Active footprinting can reveal SSIDs that may not be visible through beacons alone (for example, networks that do not broadcast SSID in beacons may still respond under certain conditions), and it can speed discovery by forcing responses rather than waiting for periodic broadcasts or client activity.
Why the other options are less accurate:
Passive footprinting (B) contradicts the scenario because passive recon involves no transmissions from the auditor's device.
Wash command (C) refers to a specific tool/command typically associated with WPS enumeration workflows, not the general technique classification being asked here.
Network discovery software (A) is too generic; the question is asking for the technique (active vs passive), and the described behavior is clearly active.
Therefore, the correct answer is D. Active Footprinting.

VeraCrypt supports strong encryption such as AES-256, allows creation of encrypted containers within existing volumes, and provides hidden volumes inside standard encrypted containers to conceal sensitive data. This combination enables both protection and plausible deniability while keeping the system operational during incident response.