Discuss CompTIA PT0-003 Exam Topic 1 Question 34

A tester is finishing an engagement and needs to ensure that artifacts resulting from the test are safely handled. Which of the following is the best procedure for maintaining client data privacy?

ARemove configuration changes and any tools deployed to compromised systems.

BSecurely destroy or remove all engagement-related data from testing systems.

CSearch through configuration files changed for sensitive credentials and remove them.

DShut down C2 and attacker infrastructure on premises and in the cloud.

Suggested Answer: B

At the end of a penetration test, handling sensitive data properly ensures compliance with legal, regulatory, and ethical guidelines.

Securely destroy or remove all engagement-related data (Option B):

Ensures confidentiality of test results.

Prevents unauthorized access to client information.

Methods include secure wiping tools (shred, sdelete), and encrypted storage deletion.

Incorrect options:

Option A (Remove configuration changes): Necessary but does not ensure complete data destruction.

Option C (Search for sensitive credentials): Important but does not address all artifacts.

Option D (Shut down C2 infrastructure): Important for OPSEC but does not address client data privacy.

Get Premium PT0-003 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Gabriele 3 months ago

Option A seems good too, but it doesn't cover all data.

Virgilio 3 months ago

Agreed! Securely destroying data is essential.

Jodi 3 months ago

I think option B is the best. Data privacy is crucial.

Hildegarde 3 months ago

D is good for security, but it doesn't address data privacy directly.

Alesia 3 months ago

Wait, are we really trusting all these methods? Sounds sketchy.

Odette 4 months ago

C seems risky, what if you miss something?

Rosalind 5 months ago

I think A is important too, but B is more comprehensive.

Linette 5 months ago

B is definitely the way to go. Data privacy is key!

Wenona 6 months ago

D seems more about shutting down infrastructure rather than handling data privacy directly. I think B is definitely the best choice here.

Viki 6 months ago

I’m a bit confused about C. It mentions searching through files, but I feel like that might not be enough to ensure complete privacy.

Cordie 6 months ago

I remember a practice question where we discussed the importance of removing sensitive data, so I lean towards B too, but A seems relevant as well.

Eladia 7 months ago

I think option B makes the most sense since securely destroying data is crucial for privacy. But I'm not entirely sure if that's the only step needed.

CompTIA PT0-003 Exam - Topic 1 Question 34 Discussion