A client asks a penetration tester to retest its network a week after the scheduled maintenance window. Which of the following is the client attempting to do?

The correct answer is D. Test the efficacy of the remediation effort. A retest is a follow-up assessment where the penetration tester checks if the vulnerabilities found in the initial test have been fixed or mitigated by the client. A retest can provide many benefits, such as verifying the effectiveness of the remediation actions, showing…

Engagement management

Question

Options

ADetermine if the tester was proficient.
BTest a new non-public-facing server for vulnerabilities.
CDetermine if the initial report is complete.
DTest the efficacy of the remediation effort.

How the community answered

(44 responses)

A
2% (1)
B
7% (3)
C
2% (1)
D
89% (39)

Explanation

A retest is a follow-up assessment where the penetration tester checks if the vulnerabilities found in the initial test have been fixed or mitigated by the client. A retest can provide many benefits, such as verifying the effectiveness of the remediation actions, showing improvement to internal or external stakeholders, and reducing the risk of future exploitation. A retest is usually performed after a certain period of time, which can be agreed upon in the rules of engagement or the statement of work. A week after the scheduled maintenance window is a reasonable time frame to allow the client to apply the necessary patches or configuration changes to their network. Therefore, the client is most likely attempting to test the efficacy of the remediation effort by asking for a retest.

Topics

#Penetration testing lifecycle#Retesting#Remediation verification#Post-engagement activities

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice