GIAC GCIH Exam - Topic 4 Question 13 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 13
Topic #: 4

John is a malicious attacker. He illegally accesses the server of We-are-secure Inc. He then places a backdoor in the We-are-secure server and alters its log files. Which of the following steps of malicious hacking includes altering the server log files?

AMaintaining access

BCovering tracks

CGaining access

DReconnaissance

Show Suggested Answer

Suggested Answer: B

by Mari at Mar 21, 2024, 03:08 PM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bernadine

6 months ago

I thought it was C at first, but B is spot on.

upvoted 0 times

...

Dalene

6 months ago

Wait, altering logs? That sounds super risky!

upvoted 0 times

...

Tegan

6 months ago

B makes the most sense, altering logs is classic cover-up.

upvoted 0 times

...

Sonia

7 months ago

I think it's A, maintaining access is key too.

upvoted 0 times

...

Leoma

7 months ago

Definitely B, covering tracks is all about hiding your tracks.

upvoted 0 times

...

Ming

7 months ago

I’m a bit confused; I thought "Gaining access" was more about the initial breach, but I guess altering logs fits with "Covering tracks."

upvoted 0 times

...

Carlee

7 months ago

I feel like "Maintaining access" could also be relevant, but I agree that altering logs is more about covering up the intrusion.

upvoted 0 times

...

German

8 months ago

I remember practicing a similar question, and I think "Covering tracks" is definitely the right answer since it involves deleting or modifying logs.

upvoted 0 times

...

Dorian

8 months ago

I think altering log files is about hiding what you've done, so it might be "Covering tracks," but I'm not entirely sure.

upvoted 0 times

...

Leota

8 months ago

This question is testing our understanding of the hacking process. Altering the log files is a classic way for an attacker to cover their tracks, so I'm going with option B.

upvoted 0 times

...

Gregg

8 months ago

I'm a little confused on this one. Is altering the log files considered part of maintaining access or covering tracks? I'll have to review my notes to be sure.

upvoted 0 times

...

Dorian

8 months ago

Okay, I know this is about the steps of a malicious hacking attack. Altering the log files is definitely part of covering the attacker's tracks, so I'm confident B is the right answer.

upvoted 0 times

...

Beth

8 months ago

Hmm, I'm a bit unsure about this one. Covering tracks could involve other steps too, like deleting evidence. I'll have to think this through carefully.

upvoted 0 times

...

Kasandra

8 months ago

This one seems straightforward. Altering the log files is clearly a way for the attacker to cover their tracks, so I'll go with option B.

upvoted 0 times

...

Talia

8 months ago

I'm a little fuzzy on the details of the theory of constraints, to be honest. But based on what I remember, I think the key is identifying constraints and managing them to boost overall system performance. So I'll probably go with either smooth workflow or lowered inventory levels as the best answer here.

upvoted 0 times

...

Scot

8 months ago

Let me think this through step-by-step. I know EM Express is for managing a single database, so option A is likely false. The other options seem plausible, but I'll double-check my understanding before answering.

upvoted 0 times

...

Kate

8 months ago

Okay, let's see. An increase in sales and a decrease in accounts receivable investment - that points to option B, the average collection period has decreased.

upvoted 0 times

...

Rodrigo

8 months ago

Okay, this one seems straightforward. The question is asking about the type of measure that involves stopping the possible consequences of a security incident. Based on that, I'm going to go with option D, Preventive.

upvoted 0 times

...

Tish

1 year ago

Elementary, my dear Watson! The culprit's tracks are as clear as day. Option B, covering the evidence, is the only logical choice.

upvoted 0 times

...

Teri

1 year ago

John must be a real DIY kind of guy, hacking servers and redecorating the logs. A true interior designer, this one.

upvoted 0 times

Vanesa

11 months ago

B) Covering tracks

upvoted 0 times

...

Daniela

11 months ago

C) Gaining access

upvoted 0 times

...

Albert

11 months ago

B) Covering tracks

upvoted 0 times

...

Phyliss

12 months ago

A) Maintaining access

upvoted 0 times

...

Erasmo

1 year ago

Hmm, let's see... Accessing the server illegally? Check. Placing a backdoor? Check. Altering the logs? Yup, that's gotta be Option B, covering tracks.

upvoted 0 times

...

Virgie

1 year ago

I bet John's a real charmer, hacking into servers and all. But hey, at least he's keeping those logs nice and tidy with option B!

upvoted 0 times

...

Stephaine

1 year ago

Gotta love how these hackers are always trying to cover their digital footprints. Option B is the way to go, no doubt about it.

upvoted 0 times

Ora

11 months ago

C) Gaining access

upvoted 0 times

...

Vince

12 months ago

B) Covering tracks

upvoted 0 times

...

Erick

1 year ago

A) Maintaining access

upvoted 0 times

...

Paola

1 year ago

Altering the log files definitely sounds like a way to cover your tracks. Option B seems like the correct answer here.

upvoted 0 times

Whitley

11 months ago

Reconnaissance is the first step in the hacking process, gaining access comes after that.

upvoted 0 times

...

Olga

12 months ago

Maintaining access is also crucial for them to continue their unauthorized activities.

upvoted 0 times

...

Bettina

1 year ago

Yes, it's important for malicious attackers to cover their tracks to avoid detection.

upvoted 0 times

...

Brett

1 year ago

I agree, altering the log files is definitely a way to cover your tracks.

upvoted 0 times

...

Tammy

1 year ago

I'm not sure, but I think it could also be A) Maintaining access. By altering the log files, the attacker could ensure continued access to the server.

upvoted 0 times

...

Jarvis

1 year ago

I agree with Rupert. Altering the server log files is definitely about covering tracks.

upvoted 0 times

...

Rupert

1 year ago

I think the answer is B) Covering tracks.

upvoted 0 times

...