A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals. Which of the following should the tester do NEXT?

The correct answer is A. Reach out to the primary point of contact. When an active exploitation is noticed during the engagement, everything thing else MUST be put on hold and contact the client immediately.

Reporting and Communication

Question

Options

AReach out to the primary point of contact
BTry to take down the attackers
CCall law enforcement officials immediately
DCollect the proper evidence and add to the final report

How the community answered

(40 responses)

A
75% (30)
B
15% (6)
C
3% (1)
D
8% (3)

Explanation

When an active exploitation is noticed during the engagement, everything thing else MUST be put on hold and contact the client immediately.

Topics

#Client communication#Incident handling (pentest)#Professional ethics#Engagement protocols

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice