Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA Exam PT0-002 Topic 1 Question 39 Discussion

Actual exam question for CompTIA's PT0-002 exam
Question #: 39
Topic #: 1
[All PT0-002 Questions]

Which of the following situations would require a penetration tester to notify the emergency contact for the engagement?

Show Suggested Answer Hide Answer
Suggested Answer: C

Penetration testing reports contain sensitive information about the vulnerabilities and risks of a customer's systems and networks. Therefore, penetration testers should respect the confidentiality and privacy of their customers and only share their reports with authorized parties. Penetration testers should also follow the terms and conditions of their contracts with their customers, which may include a period of confidentiality that prohibits them from disclosing any information related to the testing without the customer's consent.


Contribute your Thoughts:

Loise
5 days ago
Hold up, does this mean I can't just take a few credit cards for a test run? Asking for a friend. (Just kidding, option B is the way to go.)
upvoted 0 times
...
Rikki
9 days ago
I believe option A could also be critical, exploiting a critical server could have serious consequences.
upvoted 0 times
...
Carla
12 days ago
I'm going with C. Losing network access could be a sign of a bigger issue, and the client would want to know about that right away. Better safe than sorry, you know?
upvoted 0 times
...
Alona
13 days ago
Option B seems like the obvious choice here. Exfiltrating sensitive data is definitely a scenario that requires notifying the emergency contact. Can't be too careful with that kind of thing.
upvoted 0 times
...
Adela
14 days ago
I agree with Arminda, exfiltrating PII or credit card data is a serious breach.
upvoted 0 times
...
Arminda
16 days ago
I think option B would require notifying the emergency contact.
upvoted 0 times
...

Save Cancel