312-50V13 Question #52: Real Exam Question with Answer & Explanation

Question

Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking. What should you do?

Options

• AConfront the client in a respectful manner and ask her about the data.
• BCopy the data to removable media and keep it in case you need it.
• CIgnore the data and continue the assessment until completed as agreed.
• DImmediately stop work and contact the proper legal authorities.

Explanation

Upon discovering evidence of illegal activities like human trafficking during a security assessment, the ethical and legal responsibility is to immediately cease work and report the findings to the appropriate legal authorities.

Common mistakes.

• A. Confronting the client directly about serious criminal activity is dangerous, potentially compromises evidence, and is not the appropriate action for a security professional.
• B. Copying criminal evidence to removable media for personal retention is illegal, could be considered tampering, and would improperly remove evidence from its original context.
• C. Ignoring evidence of human trafficking is not only unethical but also potentially illegal, as it could be seen as complicity or failure to report a felony.

Concept tested. Ethical and legal obligations in security

No community discussion yet for this question.