nerdexam
EC-Council

312-50V9 · Question #179

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.

The correct answer is B. Stop work immediately and contact the authorities.. When a security consultant discovers illegal content such as child pornography, they have an immediate legal and ethical obligation to stop work and report to law enforcement.

Introduction to Ethical Hacking

Question

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

Options

  • ASay nothing and continue with the security testing.
  • BStop work immediately and contact the authorities.
  • CDelete the pornography, say nothing, and continue security testing.
  • DBring the discovery to the financial organization's human resource department.

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    79% (42)
  • C
    6% (3)
  • D
    11% (6)

Why each option

When a security consultant discovers illegal content such as child pornography, they have an immediate legal and ethical obligation to stop work and report to law enforcement.

ASay nothing and continue with the security testing.

Ignoring illegal content makes the consultant potentially liable as an accessory and violates mandatory reporting obligations under federal law.

BStop work immediately and contact the authorities.Correct

Child pornography is a federal crime, and any person who discovers it - including a hired consultant - is legally obligated to report it to law enforcement immediately. Continuing work, deleting the content, or routing it through HR would constitute obstruction of justice or destruction of evidence. The professional relationship with the client does not override the legal duty to report.

CDelete the pornography, say nothing, and continue security testing.

Deleting evidence of a crime constitutes destruction of evidence, which is itself a criminal act.

DBring the discovery to the financial organization's human resource department.

HR departments have no law enforcement authority and are not the appropriate body to handle federal criminal matters involving child exploitation.

Concept tested: Legal obligations upon discovering criminal evidence

Topics

#legal obligations#mandatory reporting#ethical conduct#incident handling

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice