In Phase 3 Gaining Access, which step is explicitly listed among the actions?

In Phase 3 Gaining Access, which step is explicitly listed among the actions?

• A. Password cracking
• B. Escalate privileges
• C. Get access to OS
• D. Delete logs

Answer: (A)

Gaining access is all about overcoming authentication or exploiting weaknesses to enter a system, and password cracking is a classic, explicitly listed action in that phase. It directly targets the login process by testing guesses or extracting and cracking password hashes to reveal valid credentials, which lets an attacker log in and establish a foothold. This makes password cracking the most representative step shown for gaining access, since obtaining credentials is a straightforward path to entry and is commonly highlighted in safety-focused practice materials as a primary technique in this phase. Escalating privileges typically comes after you’ve gained initial access, as a means to obtain higher rights on the compromised system. Getting access to the operating system is a broad objective rather than a concrete action, and deleting logs is about hiding activity, which belongs to later steps like maintaining access or evading detection rather than the initial entry phase.

Gaining access is all about overcoming authentication or exploiting weaknesses to enter a system, and password cracking is a classic, explicitly listed action in that phase. It directly targets the login process by testing guesses or extracting and cracking password hashes to reveal valid credentials, which lets an attacker log in and establish a foothold. This makes password cracking the most representative step shown for gaining access, since obtaining credentials is a straightforward path to entry and is commonly highlighted in safety-focused practice materials as a primary technique in this phase.

Escalating privileges typically comes after you’ve gained initial access, as a means to obtain higher rights on the compromised system. Getting access to the operating system is a broad objective rather than a concrete action, and deleting logs is about hiding activity, which belongs to later steps like maintaining access or evading detection rather than the initial entry phase.