CertNexus Exam CFR-410 Topic 9 Question 48 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 48
Topic #: 9

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

ACovering tracks

BExpanding access

CGaining persistence

DPerforming reconnaissance

Show Suggested Answer

Suggested Answer: C

by Rosio at Sep 16, 2024, 03:07 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

3 days ago

Covering tracks, huh? Sounds like someone's trying to cover their digital footprints. Better luck next time!

upvoted 0 times

...

9 days ago

Ah, the old 'delete the evidence' trick. Nice try, but we're on to you, buddy.

upvoted 0 times

...

12 days ago

Hmm, trying to cover up their tracks, eh? Sneaky hacker, but we've got their number!

upvoted 0 times

...

14 days ago

But could it also be gaining persistence? I mean, they are trying to hide their tracks to stay undetected.

upvoted 0 times

...

17 days ago

I agree with Malcolm, altering or deleting audit logs is definitely covering tracks.

upvoted 0 times

...

21 days ago

I think the hacker is involved in covering tracks.

upvoted 0 times

...