Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CertNexus CFR-410 Exam - Topic 9 Question 48 Discussion

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?
C) Gaining persistence
A) Covering tracks
B) Expanding access
D) Performing reconnaissance

CertNexus CFR-410 Exam - Topic 9 Question 48 Discussion

Actual exam question for CertNexus's CFR-410 exam
Question #: 48
Topic #: 9
[All CFR-410 Questions]

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

0/2000 characters
Sherly
6 months ago
Seems too obvious, but I guess it fits.
upvoted 0 times
...
Cassi
7 months ago
I agree, it's all about hiding their traces.
upvoted 0 times
...
Zoila
7 months ago
Wait, are you sure? What about gaining persistence?
upvoted 0 times
...
Olen
7 months ago
Yeah, that makes sense.
upvoted 0 times
...
Kiera
7 months ago
Definitely covering tracks!
upvoted 0 times
...
Elvera
7 months ago
I feel like this is a straightforward one—it's definitely covering tracks, but I could see how someone might confuse it with expanding access.
upvoted 0 times
...
Carisa
8 months ago
Covering tracks sounds right, but I wonder if it could also relate to gaining persistence somehow?
upvoted 0 times
...
Jeannetta
8 months ago
I remember a practice question about this, and I think it was also related to hiding evidence after an attack.
upvoted 0 times
...
Brice
8 months ago
I think altering audit logs is definitely about covering tracks, but I'm not 100% sure.
upvoted 0 times
...
Adolph
8 months ago
This is a tricky one, but I think the key is focusing on the hacker's goal of altering or deleting the logs. That points to the "covering tracks" phase, so I'm going with A.
upvoted 0 times
...
Detra
8 months ago
I feel pretty confident about this one. Deleting audit logs is a classic way for hackers to cover their tracks, so the answer has to be A. Covering tracks.
upvoted 0 times
...
Una
8 months ago
Okay, let me walk through this step-by-step. The hacker is trying to cover up their activity, so it has to be in the "covering tracks" phase. A is the clear answer here.
upvoted 0 times
...
Goldie
8 months ago
This one seems pretty straightforward. Altering or deleting audit logs is all about covering your tracks, so the answer has to be A.
upvoted 0 times
...
Felix
8 months ago
Hmm, I'm not totally sure about this one. Could it be expanding access or gaining persistence as well? I'll have to think it through a bit more.
upvoted 0 times
...
Lonna
8 months ago
I'm a bit confused by the wording of the options. I'll need to double-check my understanding of open-source licensing and development before selecting an answer.
upvoted 0 times
...
Gail
1 year ago
Ah, the classic 'clean up after yourself' approach. Why don't they just own up to their misdeeds like a grown-up hacker?
upvoted 0 times
Ettie
11 months ago
D) Performing reconnaissance
upvoted 0 times
...
Viki
11 months ago
C) Gaining persistence
upvoted 0 times
...
Mauricio
11 months ago
B) Expanding access
upvoted 0 times
...
Lynette
1 year ago
A) Covering tracks
upvoted 0 times
...
...
Malcom
1 year ago
Deleting system audit logs? That's a bold move, Cotton. Let's see if it pays off for them.
upvoted 0 times
Velda
11 months ago
C) Gaining persistence
upvoted 0 times
...
Elden
12 months ago
B) Expanding access
upvoted 0 times
...
Launa
1 year ago
A) Covering tracks
upvoted 0 times
...
...
Carin
1 year ago
Covering tracks, huh? Sounds like someone's trying to cover their digital footprints. Better luck next time!
upvoted 0 times
Rene
12 months ago
C) Gaining persistence
upvoted 0 times
...
Clarinda
12 months ago
Exactly, trying to hide their actions.
upvoted 0 times
...
Jerry
12 months ago
A) Covering tracks
upvoted 0 times
...
Chantay
12 months ago
No, not trying to get in further.
upvoted 0 times
...
Kelvin
12 months ago
B) Expanding access
upvoted 0 times
...
Ettie
1 year ago
Yeah, trying to erase their trail.
upvoted 0 times
...
Hillary
1 year ago
A) Covering tracks
upvoted 0 times
...
...
Josefa
1 year ago
Ah, the old 'delete the evidence' trick. Nice try, but we're on to you, buddy.
upvoted 0 times
Vivan
1 year ago
Ah, the old 'delete the evidence' trick. Nice try, but we're on to you, buddy.
upvoted 0 times
...
Deonna
1 year ago
D) Performing reconnaissance
upvoted 0 times
...
Ora
1 year ago
C) Gaining persistence
upvoted 0 times
...
Virgie
1 year ago
B) Expanding access
upvoted 0 times
...
Providencia
1 year ago
A) Covering tracks
upvoted 0 times
...
...
Tanja
1 year ago
Hmm, trying to cover up their tracks, eh? Sneaky hacker, but we've got their number!
upvoted 0 times
...
Chanel
1 year ago
But could it also be gaining persistence? I mean, they are trying to hide their tracks to stay undetected.
upvoted 0 times
...
Mel
1 year ago
I agree with Malcolm, altering or deleting audit logs is definitely covering tracks.
upvoted 0 times
...
Malcolm
1 year ago
I think the hacker is involved in covering tracks.
upvoted 0 times
...

Save Cancel