A client evaluating a penetration testing company requests examples of its work. Which of the following represents the best course of action for the penetration testers?

The correct answer is C. Determine which reports are no longer under a period of confidentiality. Sharing reports that are no longer under a confidentiality agreement ensures compliance with legal and ethical obligations while satisfying the client's request.

Engagement management

Question

Options

AProvide an example report from a prior penetration test engagement.
BAllow the client to only view the information while in secure spaces.
CDetermine which reports are no longer under a period of confidentiality.
DProvide raw output from penetration testing tools.

How the community answered

(43 responses)

A
5% (2)
B
7% (3)
C
77% (33)
D
12% (5)

Explanation

Sharing reports that are no longer under a confidentiality agreement ensures compliance with legal and ethical obligations while satisfying the client's request.

Topics

#Client Confidentiality#Professional Ethics#Engagement Management#Report Sharing Policy

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice