nerdexam
CompTIACompTIA

PT0-002 · Question #371

PT0-002 Question #371: Real Exam Question with Answer & Explanation

Sign in or unlock PT0-002 to reveal the answer and full explanation for question #371. The question stem and answer options stay visible for context.

Reporting and Communication

Question

A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment. Which of the following actions should the tester take?

Options

  • APerform forensic analysis to isolate the means of compromise and determine attribution.
  • BIncorporate the newly identified method of compromise into the red team's approach.
  • CCreate a detailed document of findings before continuing with the assessment.
  • DHalt the assessment and follow the reporting procedures as outlined in the contract.

Unlock PT0-002 to see the answer

You've previewed enough free PT0-002 questions. Unlock PT0-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Red Team Ethics#Rules of Engagement#Incident Reporting#Scope Management
Full PT0-002 PracticeBrowse All PT0-002 Questions