Câu 40: 312-39V2: Certified SOC Analyst (CSA) v2

You are a SOC L1 analyst, and a critical infrastructure provider of your organization suffered an attack where threat actors infiltrated their network and exfiltrated sensitive system blueprints. However, before their presence was detected, they executed a series of commands that altered system logs, wiped forensic artifacts, and modified timestamps to mimic normal activity. The adversary also ensured that no unusual login events were logged by manipulating security monitoring tools. Which APT lifecycle phase does this represent?

1. A. Initial Intrusion
2. B. Cleanup — đáp án hiện tại
3. C. Expansion
4. D. Search and Exfiltration