PT0-002 Question #420: Real Exam Question with Answer & Explanation

Question

A penetration tester is conducting an assessment for an e-commerce company and successfully copies the user database to the local machine. After a closer review, the penetration tester identifies several high-profile celebrities who have active user accounts with the online service. Which of the following is the most appropriate next step?

Options

• AContact the high-profile celebrities.
• BDelete the high-profile accounts.
• CImmediately contact the client.
• DRecord the findings in the penetration test report.

Explanation

Upon discovering sensitive information, such as high-profile celebrities' user accounts, the most appropriate and ethical next step is to immediately contact the client. This allows the client to take necessary actions to secure the data and mitigate any potential risks. It is important for a penetration tester to maintain confidentiality and integrity, and directly contacting the celebrities (option A), deleting the accounts (option B), or merely recording the findings without immediate notification (option D) would not be appropriate professional responses.

No community discussion yet for this question.