nerdexam
EC-Council

EC0-350 · Question #171

John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file…

The correct answer is D. The hacker is trying to cover his tracks. See the full explanation below for the reasoning.

Question

John is the network administrator of XSECURITY systems. His network was recently compromised. He analyzes the log files to investigate the attack. Take a look at the following Linux log file snippet. The hacker compromised and "owned" a Linux machine. What is the hacker trying to accomplish here?

Exhibit

EC0-350 question #171 exhibit

Options

  • AThe hacker is attempting to compromise more machines on the network
  • BThe hacker is planting a rootkit
  • CThe hacker is running a buffer overflow exploit to lock down the system
  • DThe hacker is trying to cover his tracks

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    8% (2)
  • D
    79% (19)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice