Maintaining Access and Persistence CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common technique used for covering tracks?

   • AClearing event logs and modifying log entries
   • BScanning for open ports
   • CCreating a new user account
   • DInstalling a new kernel driver
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst is investigating a compromised system and finds that the attacker has been maintaining access for several months. The analyst notices that the system's event logs have been modified to remove entries related to the attacker's activities. Which technique is the attacker using to avoid detection?

   • APrivilege escalation to gain higher privileges.
   • BMaintaining access by installing a persistence mechanism.
   • CCovering tracks by clearing or modifying event logs.
   • DReconnaissance to gather information about the target.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of covering tracks in the system hacking phases?

   • ATo escalate privileges on the target system
   • BTo install additional backdoors for future access
   • CTo remove evidence of the intrusion and avoid detection
   • DTo scan the network for other vulnerable systems
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is investigating a workstation where a user downloaded a 'free PDF converter' from a third-party website. The user reports that the software works as expected, but the analyst finds that the software also creates a hidden scheduled task that connects to an external IP address. Which type of malware is most likely present?

   • AA worm that self-replicates across the network.
   • BA trojan that disguises malicious functionality within legitimate-looking software.
   • CA backdoor that bypasses normal authentication.
   • DA rootkit that hides its presence from the operating system.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common persistence mechanism used by attackers on Windows systems?

   • AChanging the system's default DNS server
   • BDeleting the system restore points
   • CModifying the Windows Registry to run a program at startup
   • DDisabling the Windows Firewall
   Reveal Solution Discussion Select an answer first