Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

Question

Options

• AAcceptance by the client and sign-off on the final report
• BScheduling of follow-up actions and retesting
• CAttestation of findings and delivery of the report
• DReview of the lessons learned during the engagement

• A
  78% (25)
• B
  6% (2)
• C
  13% (4)
• D
  3% (1)

Explanation

The next step in the engagement after reviewing the initial findings with the client would typically be the acceptance by the client and sign-off on the final report (option A). After the client has reviewed and accepted the final report, the next step could be scheduling follow-up actions and retesting (option B) to ensure that any vulnerabilities or weaknesses identified during the penetration testing have been properly addressed and mitigated. Option C, attestation of findings and delivery of the report, may also be a necessary step depending on the specific requirements of the engagement. Option D, review of the lessons during the engagement, could also be an important step to ensure that the insights and lessons learned during the engagement are properly documented and shared with relevant stakeholders.

No community discussion yet for this question.