nerdexam
CompTIA

PT0-002 · Question #53

Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?

The correct answer is C. To determine any processes that failed to meet expectations during the assessment. When you debrief within the penetration test team, you are likely to uncover things that did or did not work well. You can use this information to influence how you conduct future tests. The primary goal of drafting a lessons learned report (LLR) or after-action report (AAR) is…

Engagement management

Question

Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?

Options

  • ATo provide feedback on the report structure and recommend improvements
  • BTo discuss the findings and dispute any false positives
  • CTo determine any processes that failed to meet expectations during the assessment
  • DTo ensure the penetration-testing team destroys all company data that was gathered during the

How the community answered

(40 responses)
  • A
    8% (3)
  • C
    90% (36)
  • D
    3% (1)

Explanation

When you debrief within the penetration test team, you are likely to uncover things that did or did not work well. You can use this information to influence how you conduct future tests. The primary goal of drafting a lessons learned report (LLR) or after-action report (AAR) is to improve your PenTest processes and tools.

Topics

#Lessons Learned#Post-engagement#Client communication#Process improvement

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice