Which among the following is the best example of the hacking concept called "clearing tracks"?

Question

Options

• AAfter a system is breached, a hacker creates a backdoor to allow re-entry into a system.
• BDuring a cyberattack, a hacker injects a rootkit into a server.
• CAn attacker gains access to a server through an exploitable vulnerability.
• DDuring a cyberattack, a hacker corrupts the event logs on all machines.

• A
  3% (1)
• C
  7% (2)
• D
  90% (27)

Explanation

Clearing Tracks Explained

Option D is correct because "clearing tracks" refers to the post-attack phase where a hacker removes or destroys evidence of their intrusion - corrupting event logs directly eliminates the digital footprints (login attempts, executed commands, file changes) that investigators would use to detect and analyze the breach.

The distractors are wrong because:

• Option A describes maintaining access (creating backdoors is a separate hacking phase)
• Option B describes escalating privileges or maintaining access (rootkits hide attacker activity but are primarily used to maintain persistent, hidden control)
• Option C describes gaining access, which is an earlier phase of the hacking cycle

Memory Tip: Think of the five phases of ethical hacking in order - Reconnaissance, Scanning, Gaining Access, Maintaining Access, Clearing Tracks (remember: "Really Skilled Hackers Go Cautiously"). Clearing tracks always comes last, like a burglar wiping fingerprints before leaving - and log corruption is the digital equivalent of wiping fingerprints.

No community discussion yet for this question.