If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

exams CFR-410 CFR-410 exam 0 Comments

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?
A . Covering tracks
B. Expanding access
C. Gaining persistence
D. Performing reconnaissance

Answer: A

Explanation:

Reference: https://resources.infosecinstitute.com/category/certifications-training/ethical-hacking/covering- tracks/log-tampering-101/#gref