A tester is finishing an engagement and needs to ensure that artifacts resulting from the test are safely handled. Which of the following is the best procedure for maintaining client data privacy?

The correct answer is B. Securely destroy or remove all engagement-related data from testing systems. At the end of a penetration test, handling sensitive data properly ensures compliance with legal, regulatory, and ethical guidelines. Securely destroy or remove all engagement-related data: Ensures confidentiality of test results. Prevents unauthorized access to client…

Submitted by suresh_in· Mar 6, 2026Engagement Management

Question

Options

ARemove configuration changes and any tools deployed to compromised systems.
BSecurely destroy or remove all engagement-related data from testing systems.
CSearch through configuration files changed for sensitive credentials and remove them.
DShut down C2 and attacker infrastructure on premises and in the cloud.

How the community answered

(28 responses)

A
7% (2)
B
89% (25)
C
4% (1)

Explanation

At the end of a penetration test, handling sensitive data properly ensures compliance with legal, regulatory, and ethical guidelines. Securely destroy or remove all engagement-related data: Ensures confidentiality of test results. Prevents unauthorized access to client information. Methods include secure wiping tools (shred, sdelete), and encrypted storage deletion.

Topics

#Post-engagement cleanup#Data privacy#Client data handling

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice