When evidence of a prior compromise is encountered, it is critical to communicate this to the client immediately. Doing so aligns with situational awareness, enabling the client to understand the current threat landscape and act accordingly. This takes precedence over other communications because it may impact the client's operational security and requires urgent attention. While documenting the issue and revising test boundaries are important, they do not take precedence over immediate communication in such scenarios.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is it important to report incidents of prior compromise immediately during a penetration test?
Open an interactive chat with Bash
What does 'situational awareness' mean in the context of cybersecurity?
Open an interactive chat with Bash
What should be included in the final penetration testing report after a potential breach is detected?