During a penetration test, you encounter evidence that suggests a previously undetected breach by a third party. What is the BEST course of action?
Continue with the planned testing activities and include the findings in the final report.
Pause the penetration test and promptly report the indicator of prior compromise to the primary client contact.
Revise the penetration testing boundaries to exclude the systems involved with the potential prior breach.
Immediately escalate the issue within your own team for analysis before notifying the client.