What is a typical objective of post-exploitation activities?

• A. Demonstrate business implications and risks after gaining access.
• B. Immediately erase traces.
• C. Disable logging permanently.
• D. Isolate the test system from network.

Answer: (A)

After gaining access, the main aim is to understand and communicate the potential impact to the business. Post-exploitation activities focus on assessing what data and assets are reachable, what risks arise, and how those risks translate into real-world consequences for the organization. Demonstrating business implications and risks after gaining access provides stakeholders with the context needed to prioritize remediation and strengthen defenses, which is why this option fits best. Actions aimed at erasing traces or disabling logging focus on concealment rather than evaluation, and isolating the test system would prevent meaningful assessment.