Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CertNexus Exam CFR-410 Topic 9 Question 48 Discussion

Actual exam question for CertNexus's CFR-410 exam
Question #: 48
Topic #: 9
[All CFR-410 Questions]

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

Gail
1 months ago
Ah, the classic 'clean up after yourself' approach. Why don't they just own up to their misdeeds like a grown-up hacker?
upvoted 0 times
Lynette
10 days ago
A) Covering tracks
upvoted 0 times
...
...
Malcom
1 months ago
Deleting system audit logs? That's a bold move, Cotton. Let's see if it pays off for them.
upvoted 0 times
Launa
13 days ago
A) Covering tracks
upvoted 0 times
...
...
Carin
2 months ago
Covering tracks, huh? Sounds like someone's trying to cover their digital footprints. Better luck next time!
upvoted 0 times
Kelvin
2 days ago
B) Expanding access
upvoted 0 times
...
Ettie
1 months ago
Yeah, trying to erase their trail.
upvoted 0 times
...
Hillary
1 months ago
A) Covering tracks
upvoted 0 times
...
...
Josefa
2 months ago
Ah, the old 'delete the evidence' trick. Nice try, but we're on to you, buddy.
upvoted 0 times
Vivan
25 days ago
Ah, the old 'delete the evidence' trick. Nice try, but we're on to you, buddy.
upvoted 0 times
...
Deonna
29 days ago
D) Performing reconnaissance
upvoted 0 times
...
Ora
1 months ago
C) Gaining persistence
upvoted 0 times
...
Virgie
1 months ago
B) Expanding access
upvoted 0 times
...
Providencia
2 months ago
A) Covering tracks
upvoted 0 times
...
...
Tanja
2 months ago
Hmm, trying to cover up their tracks, eh? Sneaky hacker, but we've got their number!
upvoted 0 times
...
Chanel
2 months ago
But could it also be gaining persistence? I mean, they are trying to hide their tracks to stay undetected.
upvoted 0 times
...
Mel
2 months ago
I agree with Malcolm, altering or deleting audit logs is definitely covering tracks.
upvoted 0 times
...
Malcolm
2 months ago
I think the hacker is involved in covering tracks.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77