Free CompTIA Security+ SY0-701 Practice Question
During an authorized penetration test, you uncovered a server susceptible to an injection attack. To proceed according to best practices, what step should be taken before attempting to exploit this vulnerability?
Review the rules of engagement and testing scope to ensure that exploitation of the vulnerability does not exceed authorized activities.
Immediately exploit the vulnerability to determine the impact without altering any data on the server.
Document the vulnerability in detail and continue testing other areas, leaving exploitation for the final phase.
Inform the organization's IT department about the vulnerability, requesting permission to exploit it.
This question's topic:
CompTIA Security+ SY0-701 /
Security Operations
SAVE $49