In Phase 4 Maintaining Access, which action is described to ensure future access?

In Phase 4 Maintaining Access, which action is described to ensure future access?

• A. Use compromised systems
• B. Create backdoors, so they can go back for more info
• C. Patch vulnerabilities
• D. Scan for new targets

Answer: (B)

Maintaining access is about keeping a foothold in the target so you can return for follow-up actions without re-exploiting from scratch. Creating backdoors is the classic way to achieve this persistence: it embeds a hidden, ongoing path or mechanism that lets the attacker reconnect later, even after the initial entry point is discovered or closed. This could involve hidden accounts, scheduled tasks, services, or covert tunnels that survive reboots, making future data gathering or deeper exploitation much easier. Patching vulnerabilities would shut the door to access, not preserve it. Scanning for new targets is about finding more systems to compromise, not about staying connected to the ones already gained. Simply using compromised systems without a persistence mechanism may work briefly, but it doesn’t guarantee ongoing access.

Maintaining access is about keeping a foothold in the target so you can return for follow-up actions without re-exploiting from scratch. Creating backdoors is the classic way to achieve this persistence: it embeds a hidden, ongoing path or mechanism that lets the attacker reconnect later, even after the initial entry point is discovered or closed. This could involve hidden accounts, scheduled tasks, services, or covert tunnels that survive reboots, making future data gathering or deeper exploitation much easier.

Patching vulnerabilities would shut the door to access, not preserve it. Scanning for new targets is about finding more systems to compromise, not about staying connected to the ones already gained. Simply using compromised systems without a persistence mechanism may work briefly, but it doesn’t guarantee ongoing access.