GIAC GCIH Exam - Topic 4 Question 13 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 13
Topic #: 4

John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the server log files?

AMaintaining access

BCovering tracks

CGaining access

DReconnaissance

Show Suggested Answer

Suggested Answer: B

by Mari at Mar 21, 2024, 03:08 PM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bernadine

8 months ago

I thought it was C at first, but B is spot on.

upvoted 0 times

...

Dalene

9 months ago

Wait, altering logs? That sounds super risky!

upvoted 0 times

...

Tegan

9 months ago

B makes the most sense, altering logs is classic cover-up.

upvoted 0 times

...

Sonia

9 months ago

I think it's A, maintaining access is key too.

upvoted 0 times

...

Leoma

9 months ago

Definitely B, covering tracks is all about hiding your tracks.

upvoted 0 times

...

Ming

9 months ago

I’m a bit confused; I thought "Gaining access" was more about the initial breach, but I guess altering logs fits with "Covering tracks."

upvoted 0 times

...

Carlee

10 months ago

I feel like "Maintaining access" could also be relevant, but I agree that altering logs is more about covering up the intrusion.

upvoted 0 times

...

German

10 months ago

I remember practicing a similar question, and I think "Covering tracks" is definitely the right answer since it involves deleting or modifying logs.

upvoted 0 times

...

Dorian

10 months ago

I think altering log files is about hiding what you've done, so it might be "Covering tracks," but I'm not entirely sure.

upvoted 0 times

...

Leota

10 months ago

This question is testing our understanding of the hacking process. Altering the log files is a classic way for an attacker to cover their tracks, so I'm going with option B.

upvoted 0 times

...

Gregg

10 months ago

I'm a little confused on this one. Is altering the log files considered part of maintaining access or covering tracks? I'll have to review my notes to be sure.

upvoted 0 times

...

Dorian

10 months ago

Okay, I know this is about the steps of a malicious hacking attack. Altering the log files is definitely part of covering the attacker's tracks, so I'm confident B is the right answer.

upvoted 0 times

...

Beth

10 months ago

Hmm, I'm a bit unsure about this one. Covering tracks could involve other steps too, like deleting evidence. I'll have to think this through carefully.

upvoted 0 times

...

Kasandra

10 months ago

This one seems straightforward. Altering the log files is clearly a way for the attacker to cover their tracks, so I'll go with option B.

upvoted 0 times

...

Talia

10 months ago

I'm a little fuzzy on the details of the theory of constraints, to be honest. But based on what I remember, I think the key is identifying constraints and managing them to boost overall system performance. So I'll probably go with either smooth workflow or lowered inventory levels as the best answer here.

upvoted 0 times

...

Scot

10 months ago

Let me think this through step-by-step. I know EM Express is for managing a single database, so option A is likely false. The other options seem plausible, but I'll double-check my understanding before answering.

upvoted 0 times

...

Kate

10 months ago

Okay, let's see. An increase in sales and a decrease in accounts receivable investment - that points to option B, the average collection period has decreased.

upvoted 0 times

...

Rodrigo

10 months ago

Okay, this one seems straightforward. The question is asking about the type of measure that involves stopping the possible consequences of a security incident. Based on that, I'm going to go with option D, Preventive.

upvoted 0 times

...

Tish

1 year ago

Elementary, my dear Watson! The culprit's tracks are as clear as day. Option B, covering the evidence, is the only logical choice.

upvoted 0 times

...

Teri

1 year ago

John must be a real DIY kind of guy, hacking servers and redecorating the logs. A true interior designer, this one.

upvoted 0 times

Vanesa

1 year ago

B) Covering tracks

upvoted 0 times

...

Daniela

1 year ago

C) Gaining access

upvoted 0 times

...

Albert

1 year ago

B) Covering tracks

upvoted 0 times

...

Phyliss

1 year ago

A) Maintaining access

upvoted 0 times

...

Erasmo

1 year ago

Hmm, let's see... Accessing the server illegally? Check. Placing a backdoor? Check. Altering the logs? Yup, that's gotta be Option B, covering tracks.

upvoted 0 times

...

Virgie

1 year ago

I bet John's a real charmer, hacking into servers and all. But hey, at least he's keeping those logs nice and tidy with option B!

upvoted 0 times

...

Stephaine

1 year ago

Gotta love how these hackers are always trying to cover their digital footprints. Option B is the way to go, no doubt about it.

upvoted 0 times

Ora

1 year ago

C) Gaining access

upvoted 0 times

...

Vince

1 year ago

B) Covering tracks

upvoted 0 times

...

Erick

1 year ago

A) Maintaining access

upvoted 0 times

...

Paola

1 year ago

Altering the log files definitely sounds like a way to cover your tracks. Option B seems like the correct answer here.

upvoted 0 times

Whitley

1 year ago

Reconnaissance is the first step in the hacking process, gaining access comes after that.

upvoted 0 times

...

Olga

1 year ago

Maintaining access is also crucial for them to continue their unauthorized activities.

upvoted 0 times

...

Bettina

1 year ago

Yes, it's important for malicious attackers to cover their tracks to avoid detection.

upvoted 0 times

...

Brett

1 year ago

I agree, altering the log files is definitely a way to cover your tracks.

upvoted 0 times

...

Tammy

1 year ago

I'm not sure, but I think it could also be A) Maintaining access. By altering the log files, the attacker could ensure continued access to the server.

upvoted 0 times

...

Jarvis

1 year ago

I agree with Rupert. Altering the server log files is definitely about covering tracks.

upvoted 0 times

...

Rupert

1 year ago

I think the answer is B) Covering tracks.

upvoted 0 times

...