Exam PT0-001 topic 1 question 44 discussion

Why don't we cut off the powerline? :) The best answer is C

I believe the answer should be C

ccccccccc

A should be the correct one. It isn't saying "Pentesting" so you assume that in "testing"stage, developers and engineers should be able to disable the network port of the affected service.

looks good to me

c for sure

when a pen tester encounters evidence of a compromised system, should IRT be notified to ensure that the organisation is aware of the attack. if the evidence appears to be "fresh", the pen-test might need to be suspended until the security breach is handled. if it is historical, the pen test team should log the discovery and continue with the task at hand. on the real world all this depends on your arrangement with the client.

answer is C

I agree with C

Agree with C

answer is C. Discovery of a critical finding. If the penetration test identifies a critical issue with the security of the client’s environment, the testers should not wait for the delivery of their final report to communicate this issue to management. Leaving a critical vulnerability unaddressed may put the organization at an unacceptable level of risk and result in a compromise. Penetration testers who discover and validate the presence of a critical issue should follow the procedures outlined in the statement of work to immediately notify management of the issue, even if this notification reduces the degree of penetration that the testers are able to achieve during the test. verbatim whats in the book.

I prefer c

Even if a finding is critical you do not interfere with the network or systems. Only evidence of an attack or current attack would require the action of reaching out to the client. Vuln scans would report on all vulns, not just critical.

Has to be C

PenTest+ Study Guide - Sybex Discovery of a critical finding. If the penetration test identifies a critical issue with the security of the client’s environment, the testers should not wait for the delivery of their final report to communicate this issue to management. Leaving a critical vulnerability unaddressed may put the organization at an unacceptable level of risk and result in a compromise. Penetration testers who discover and validate the presence of a critical issue should follow the procedures outlined in the statement of work to immediately notify management of the issue, even if this notification reduces the degree of penetration that the testers are able to achieve during the test.

Only alert the client in times of service outages or signs of compromise. If i find a vuln with a CVSS of 10, I'm going to continue my engagement until I discover all findings. Therefore the answer is actually B

The correct answer is C 'Promptly alert the client with details of the finding.' according to the CompTIA Pentest+ Practice Test, Sybex. Note: In this scenario, since the penetration tester discovered a critical vulnerability, the tester should immediately alert the client with the details of the findings.