CompTIA PenTest+ PT0-002 Practice Question
During a penetration testing engagement, what should a penetration tester do if they inadvertently discover evidence of illegal activity on the target system?
Document the finding and continue the test, reporting it only at the end of the engagement.
Ignore the evidence as it is outside the original scope of the engagement.
Delete the evidence to avoid implicating the client in any illegal activity.
Report the finding immediately to the appropriate contact and authorities.