Which of the following components should a penetration tester include in the final assessment report?

The correct answer is D. Attack narrative. The attack narrative is a critical part of the report that tells the story of how the tester exploited vulnerabilities, gained access, and moved laterally. It helps stakeholders understand the real- world impact in a readable and logical sequence. User activities are more operati

Submitted by fernanda_arg· Mar 6, 2026Engagement Management

Question

Options

AUser activities
BCustomer remediation plan
CKey management
DAttack narrative

How the community answered

(29 responses)

A
3% (1)
B
3% (1)
D
93% (27)

Explanation

The attack narrative is a critical part of the report that tells the story of how the tester exploited vulnerabilities, gained access, and moved laterally. It helps stakeholders understand the real- world impact in a readable and logical sequence. User activities are more operational logs than part of a pentest report. Customer remediation plan is the client's responsibility. Key management might be discussed but is not a required component of the report.

Topics

#report writing#attack narrative#penetration test report

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice