nerdexam
EC-Council

EC0-350 · Question #403

An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a…

The correct answer is B. Ask the employer for authorization to perform the work outside the company. See the full explanation below for the reasoning.

Question

An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor. What should the hacker's next step be before starting work on this job?

Options

  • AStart by foot printing the network and mapping out a plan of attack.
  • BAsk the employer for authorization to perform the work outside the company.
  • CBegin the reconnaissance phase with passive information gathering and then move into active
  • DUse social engineering techniques on the friend's employees to help identify areas that may be

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    84% (31)
  • C
    11% (4)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice