During a penetration testing engagement, what should a penetration tester do if they inadvertently discover evidence of illegal activity on the target system?
Delete the evidence to avoid implicating the client in any illegal activity.
Document the finding and continue the test, reporting it only at the end of the engagement.
Report the finding immediately to the appropriate contact and authorities.
Ignore the evidence as it is outside the original scope of the engagement.