CompTIA Exam PT0-002 Topic 1 Question 39 Discussion

Actual exam question for CompTIA's PT0-002 exam

Question #: 39
Topic #: 1

Which of the following situations would require a penetration tester to notify the emergency contact for the engagement?

AThe team exploits a critical server within the organization.

BThe team exfiltrates PII or credit card data from the organization.

CThe team loses access to the network remotely.

DThe team discovers another actor on a system on the network.

Show Suggested Answer

Suggested Answer: C

Penetration testing reports contain sensitive information about the vulnerabilities and risks of a customer's systems and networks. Therefore, penetration testers should respect the confidentiality and privacy of their customers and only share their reports with authorized parties. Penetration testers should also follow the terms and conditions of their contracts with their customers, which may include a period of confidentiality that prohibits them from disclosing any information related to the testing without the customer's consent.

by Andra at Mar 28, 2023, 10:41 AM

Limited Time Offer

25%

Off

Get Premium PT0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dona

2 months ago

D, no doubt. Finding another actor on the network? That's like hitting the jackpot! Time to put on our detective hats and investigate. The client will be thrilled, I'm sure.

upvoted 0 times

Tonja

9 days ago

C) The team loses access to the network remotely.

upvoted 0 times

...

Yvonne

11 days ago

B) The team exfiltrates PII or credit card data from the organization.

upvoted 0 times

...

Fernanda

1 months ago

A) The team exploits a critical server within the organization.

upvoted 0 times

...

Loise

2 months ago

Hold up, does this mean I can't just take a few credit cards for a test run? Asking for a friend. (Just kidding, option B is the way to go.)

upvoted 0 times

Asuncion

2 months ago

B) The team exfiltrates PII or credit card data from the organization.

upvoted 0 times

...

Gail

2 months ago

A) The team exploits a critical server within the organization.

upvoted 0 times

...

Rikki

2 months ago

I believe option A could also be critical, exploiting a critical server could have serious consequences.

upvoted 0 times

...

Carla

2 months ago

I'm going with C. Losing network access could be a sign of a bigger issue, and the client would want to know about that right away. Better safe than sorry, you know?

upvoted 0 times

Ruth

2 months ago

D) The team discovers another actor on a system on the network.

upvoted 0 times

...

Raylene

2 months ago

C) The team loses access to the network remotely.

upvoted 0 times

...

Sylvie

2 months ago

B) The team exfiltrates PII or credit card data from the organization.

upvoted 0 times

...

Shawnta

2 months ago

A) The team exploits a critical server within the organization.

upvoted 0 times

...

Alona

2 months ago

Option B seems like the obvious choice here. Exfiltrating sensitive data is definitely a scenario that requires notifying the emergency contact. Can't be too careful with that kind of thing.

upvoted 0 times

...

Adela

2 months ago

I agree with Arminda, exfiltrating PII or credit card data is a serious breach.

upvoted 0 times

...

Arminda

3 months ago

I think option B would require notifying the emergency contact.

upvoted 0 times

...