EC-Council
312-50V9 · Question #183
312-50V9 Question #183: Real Exam Question with Answer & Explanation
The correct answer is A: Immediately stop work and contact the proper legal authorities.. Discovering evidence of serious crimes such as human trafficking during a security assessment creates an immediate legal and ethical duty to halt work and contact law enforcement.
Question
Your company performs penetration tests and security assessments for small and medium-sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking. What should you do?
Options
- AImmediately stop work and contact the proper legal authorities.
- BCopy the data to removable media and keep it in case you need it.
- CConfront the client in a respectful manner and ask her about the data.
- DIgnore the data and continue the assessment until completed as agreed.
Explanation
Discovering evidence of serious crimes such as human trafficking during a security assessment creates an immediate legal and ethical duty to halt work and contact law enforcement.
Common mistakes.
- B. Copying the data to removable media risks tainting the evidentiary chain of custody and could constitute evidence tampering, complicating any subsequent prosecution.
- C. Confronting the client directly is dangerous, could allow the client to destroy evidence, and is not the role of a security assessor.
- D. Ignoring criminal activity and completing the engagement makes the assessor potentially complicit in ongoing crimes and exposes them to serious legal liability.
Concept tested. Ethical duty to report crimes discovered during assessments
Community Discussion
No community discussion yet for this question.