Why is it imperative for penetration testers to remove any credentials they have created during an assessment after the engagement concludes?
To ensure penetration testers can reuse the same credentials for future tests
Because the credentials may be required for client-side auditing purposes
It is a legal requirement in most countries to delete any data produced during a test
To revert systems to their original security posture and prevent misuse by unauthorized parties