A client evaluating a penetration testing company requests examples of its work. Which of the following represents the BEST course of action for the penetration testers?

The correct answer is C. Determine which reports are no longer under a period of confidentiality. Penetration testing reports contain sensitive information about the vulnerabilities and risks of a customer's systems and networks. Therefore, penetration testers should respect the confidentiality and privacy of their customers and only share their reports with authorized…

Reporting and Communication

Question

Options

ARedact identifying information and provide a previous customer's documentation.
BAllow the client to only view the information while in secure spaces.
CDetermine which reports are no longer under a period of confidentiality.
DProvide raw output from penetration testing tools.

How the community answered

(24 responses)

A
8% (2)
B
13% (3)
C
75% (18)
D
4% (1)

Explanation

Penetration testing reports contain sensitive information about the vulnerabilities and risks of a customer's systems and networks. Therefore, penetration testers should respect the confidentiality and privacy of their customers and only share their reports with authorized parties. Penetration testers should also follow the terms and conditions of their contracts with their customers, which may include a period of confidentiality that prohibits them from disclosing any information related to the testing without the customer's consent.

Topics

#Client Confidentiality#Professional Ethics#Report Disclosure#Legal Compliance

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice