Exam PT0-002 topic 1 question 315 discussion

Actual exam question from CompTIA's PT0-002

Question #: 315
Topic #: 1

A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment. Which of the following actions should the tester take?

A. Perform forensic analysis to isolate the means of compromise and determine attribution.
B. Incorporate the newly identified method of compromise into the red team’s approach.
C. Create a detailed document of findings before continuing with the assessment.
D. Halt the assessment and follow the reporting procedures as outlined in the contract.

Show Suggested Answer

Suggested Answer: D 🗳️

by Rezaee at March 2, 2024, 5:16 p.m.

Comments

Submit Cancel

041ba31

8 months ago

Selected Answer: D

Upon discovering an artifact indicating a prior compromise, the tester should stop the assessment to report this critical finding, ensuring the client can address the real, immediate security concern

upvoted 1 times

...

Rezaee

8 months, 2 weeks ago

Selected Answer: D

D. Halt the assessment and follow the reporting procedures as outlined in the contract.

upvoted 1 times

...

Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 315 discussion

Comments

041ba31

Rezaee

SY0-701