CompTIA
PT0-002 · Question #29
A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
The correct answer is D. Inform the customer immediately about the backdoor. When it comes to finding prior attacks always inform the client.
Reporting and Communication
Question
A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
Options
- AForensically acquire the backdoor Trojan and perform attribution
- BUtilize the backdoor in support of the engagement
- CContinue the engagement and include the backdoor finding in the final report
- DInform the customer immediately about the backdoor
How the community answered
(22 responses)- A14% (3)
- B9% (2)
- C5% (1)
- D73% (16)
Explanation
When it comes to finding prior attacks always inform the client.
Topics
#Immediate Reporting#Ethical Conduct#Client Communication#Incident Escalation
Community Discussion
No community discussion yet for this question.