MENU
John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the server log files?
Suggested Answer: B
Get Premium GCIH Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
BE
Bernadine
10 months ago
I thought it was C at first, but B is spot on.
DA
Dalene
11 months ago
Wait, altering logs? That sounds super risky!
TE
Tegan
11 months ago
B makes the most sense, altering logs is classic cover-up.
SO
Sonia
11 months ago
I think it's A, maintaining access is key too.
LE
Leoma
11 months ago
Definitely B, covering tracks is all about hiding your tracks.
MI
Ming
11 months ago
I’m a bit confused; I thought "Gaining access" was more about the initial breach, but I guess altering logs fits with "Covering tracks."
CA
Carlee
12 months ago
I feel like "Maintaining access" could also be relevant, but I agree that altering logs is more about covering up the intrusion.
GE
German
12 months ago
I remember practicing a similar question, and I think "Covering tracks" is definitely the right answer since it involves deleting or modifying logs.
DO
Dorian
12 months ago
I think altering log files is about hiding what you've done, so it might be "Covering tracks," but I'm not entirely sure.
LE
Leota
12 months ago
This question is testing our understanding of the hacking process. Altering the log files is a classic way for an attacker to cover their tracks, so I'm going with option B.
GR
Gregg
12 months ago
I'm a little confused on this one. Is altering the log files considered part of maintaining access or covering tracks? I'll have to review my notes to be sure.
DO
Dorian
1 year ago
Okay, I know this is about the steps of a malicious hacking attack. Altering the log files is definitely part of covering the attacker's tracks, so I'm confident B is the right answer.
BE
Beth
1 year ago
Hmm, I'm a bit unsure about this one. Covering tracks could involve other steps too, like deleting evidence. I'll have to think this through carefully.
KA
Kasandra
1 year ago
This one seems straightforward. Altering the log files is clearly a way for the attacker to cover their tracks, so I'll go with option B.
TA
Talia
1 year ago
I'm a little fuzzy on the details of the theory of constraints, to be honest. But based on what I remember, I think the key is identifying constraints and managing them to boost overall system performance. So I'll probably go with either smooth workflow or lowered inventory levels as the best answer here.
SC
Scot
1 year ago
Let me think this through step-by-step. I know EM Express is for managing a single database, so option A is likely false. The other options seem plausible, but I'll double-check my understanding before answering.
KA
Kate
1 year ago
Okay, let's see. An increase in sales and a decrease in accounts receivable investment - that points to option B, the average collection period has decreased.
RO
Rodrigo
1 year ago
Okay, this one seems straightforward. The question is asking about the type of measure that involves stopping the possible consequences of a security incident. Based on that, I'm going to go with option D, Preventive.
TI
Tish
1 year ago
Elementary, my dear Watson! The culprit's tracks are as clear as day. Option B, covering the evidence, is the only logical choice.
TE
Teri
1 year ago
John must be a real DIY kind of guy, hacking servers and redecorating the logs. A true interior designer, this one.
VA
Vanesa
1 year ago
B) Covering tracks
DA
Daniela
1 year ago
C) Gaining access
AL
Albert
1 year ago
B) Covering tracks
PH
Phyliss
1 year ago
A) Maintaining access
ER
Erasmo
1 year ago
Hmm, let's see... Accessing the server illegally? Check. Placing a backdoor? Check. Altering the logs? Yup, that's gotta be Option B, covering tracks.
VI
Virgie
1 year ago
I bet John's a real charmer, hacking into servers and all. But hey, at least he's keeping those logs nice and tidy with option B!
ST
Stephaine
1 year ago
Gotta love how these hackers are always trying to cover their digital footprints. Option B is the way to go, no doubt about it.
OR
Ora
1 year ago
C) Gaining access
VI
Vince
1 year ago
B) Covering tracks
ER
Erick
1 year ago
A) Maintaining access
PA
Paola
1 year ago
Altering the log files definitely sounds like a way to cover your tracks. Option B seems like the correct answer here.
WH
Whitley
1 year ago
Reconnaissance is the first step in the hacking process, gaining access comes after that.
OL
Olga
1 year ago
Maintaining access is also crucial for them to continue their unauthorized activities.
BE
Bettina
1 year ago
Yes, it's important for malicious attackers to cover their tracks to avoid detection.
BR
Brett
1 year ago
I agree, altering the log files is definitely a way to cover your tracks.
TA
Tammy
2 years ago
I'm not sure, but I think it could also be A) Maintaining access. By altering the log files, the attacker could ensure continued access to the server.
JA
Jarvis
2 years ago
I agree with Rupert. Altering the server log files is definitely about covering tracks.
RU
Rupert
2 years ago
I think the answer is B) Covering tracks.