PT0-002 · Question #154
A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third- party…
The correct answer is C. Stop the assessment and inform the emergency contact. Critical findings The first communication trigger is known as critical findings. A critical finding occurs when, during a pentest, you come across a critical or major vulnerability in a system that has the customer wide open to an attack. In this case you do not want to wait to…
Question
A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third- party supplier. Which of the following is the BEST action for the penetration tester to take?
Options
- AUtilize the tunnel as a means of pivoting to other internal devices.
- BDisregard the IP range, as it is out of scope.
- CStop the assessment and inform the emergency contact.
- DScan the IP range for additional systems to exploit.
How the community answered
(66 responses)- A8% (5)
- B15% (10)
- C74% (49)
- D3% (2)
Explanation
Critical findings The first communication trigger is known as critical findings. A critical finding occurs when, during a pentest, you come across a critical or major vulnerability in a system that has the customer wide open to an attack. In this case you do not want to wait to communicate this important finding to the customer in the final report; you should stop the pentest immediately and talk to the stakeholder about the critical finding and determine how you are to proceed.
Topics
Community Discussion
No community discussion yet for this question.