GIAC Certified Incident Handler (GCIH) — Question 165

Which stage of an attack typically involves little or no direct interaction with the attack target(s)?

Answer options

• A. Reconnaissance
• B. Scanning
• C. Covering the Tracks
• D. Keeping Access
• E. Denial of Service

Correct answer: C

Explanation

The correct answer is C, as covering the tracks often involves actions taken after an attack has occurred, focusing on obscuring the attacker's presence without directly interacting with the target. Options A and B involve active engagement with the target, while D and E focus on maintaining access or disrupting services, respectively.