PT0-002 · Question #594
Which of the following can attest evidence findings in a penetration testing report?
The correct answer is B. Screenshots of exploitation or vulnerabilities. In a penetration testing report, screenshots of successful exploitation or identified vulnerabilities provide concrete, verifiable evidence of the findings. This visual proof enhances the credibility and clarity of the report.
Question
Which of the following can attest evidence findings in a penetration testing report?
Options
- AWritten descriptions
- BScreenshots of exploitation or vulnerabilities
- CExecutive reports from automated security scanners
- DEntries on exploit-db.com.
How the community answered
(44 responses)- A7% (3)
- B86% (38)
- C2% (1)
- D5% (2)
Why each option
In a penetration testing report, screenshots of successful exploitation or identified vulnerabilities provide concrete, verifiable evidence of the findings. This visual proof enhances the credibility and clarity of the report.
Written descriptions explain findings but lack the verifiable proof that visual evidence like screenshots provide.
Screenshots are direct visual evidence that clearly show the vulnerability or the successful exploitation, proving the finding's existence and impact. They are crucial for validating the claims made in a penetration testing report and aiding the client in understanding the issue.
Executive reports from automated security scanners are summaries that may not contain the granular proof of a specific penetration testing finding, and the findings may not be directly attestable by the penetration tester.
Entries on exploit-db.com are public databases of exploits and vulnerabilities and do not serve as direct evidence of a finding on a specific client's system.
Concept tested: Penetration testing reporting evidence
Topics
Community Discussion
No community discussion yet for this question.