Q. How can open lines of communication help penetration testers during a test?

View solution

Q. What is the importance of defining a communication path during the planning stages of an engagement?

View solution

Q. What should the communication path include during a penetration test engagement?

View solution

Q. How can penetration testers establish a regular rhythm of communication with clients?

View solution

Q. What is the purpose of periodic status updates during a penetration test engagement?

View solution

Q. When does the completion of a testing stage serve as a communication trigger during a penetration test?

View solution

Q. Why should penetration testers immediately communicate the discovery of a critical finding to management?

View solution

Q. What is the recommended action for penetration testers who discover indicators of an ongoing or past compromise?

View solution

Q. Why is reprioritizing the goals of a penetration test considered acceptable?

View solution

Q. What is emphasized regarding reprioritization in the world of penetration testing?

View solution

Q. What is the primary objective of recommending mitigation strategies in a penetration test?

View solution

Q. Why are penetration testers uniquely suited to recommend ways to remediate discovered flaws?

View solution

Q. In the context of penetration testing, what do technical controls primarily provide defense against?

View solution

Q. What is an example of an administrative control?

View solution

Q. How do physical controls contribute to security in a penetration test?

View solution

Q. What risk might an organization address by implementing an employee awareness campaign, a new business process for wire transfers, and email content filtering simultaneously?

View solution

Q. How can organizations remediate the vulnerability of weak password complexity?

View solution

Q. What is the disadvantage of storing passwords in plaintext on a server?

View solution

Q. Why is the risk of storing passwords in plaintext significant, even after a system has been compromised?

View solution

Q. What is the recommended solution for preventing passwords stored on a server from being easily accessible to attackers?

View solution