CompTIA PenTest+ PT0-002 Practice Question
During a penetration test, you identify a misconfiguration that exposes sensitive data. According to best practices, what is the most appropriate step to take in terms of communication?
Include the sensitive data exposure in the next scheduled status report.
Wait until the presentation of findings to demonstrate the full impact of the misconfiguration.
Save the finding for the final report to prevent causing alarm during the test.
Immediately notify the primary or emergency contact to discuss the finding.