nerdexam
EC-Council

312-50V7 · Question #118

John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file…

The correct answer is D. The hacker is trying to cover his tracks. See the full explanation below for the reasoning.

Question

John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file snippet. The hacker compromised and "owned" a Linux machine. What is the hacker trying to accomplish here?

Exhibit

312-50V7 question #118 exhibit

Options

  • AThe hacker is attempting to compromise more machines on the network
  • BThe hacker is planting a rootkit
  • CThe hacker is running a buffer overflow exploit to lock down the system
  • DThe hacker is trying to cover his tracks

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    15% (8)
  • C
    9% (5)
  • D
    72% (39)

Community Discussion

No community discussion yet for this question.

Full 312-50V7 Practice