Exam PT0-002 topic 1 question 365 discussion

Actual exam question from CompTIA's PT0-002

Question #: 365
Topic #: 1

During an engagement with a financial institution, a penetration tester found hard-coded credentials in a publicly accessible code repository. Those credentials allowed the penetration tester to access PII from many of the institution’s customers and services that are hosted by a cloud provider. Which of the following actions should the penetration tester do next?

A. Proceed with the engagement and add the evidence in the final report
B. Keep the found credentials and use them during the engagement
C. Disclose the findings through a bug bounty platform
D. Report the findings to the customer’s technical contact immediately

Show Suggested Answer

Suggested Answer: D 🗳️

by BlackSkullz at Nov. 15, 2024, 3:15 p.m.

Comments

Submit Cancel

BlackSkullz

5 months, 3 weeks ago

Selected Answer: D

Hard-coded credentials inside of a publicly accessible code repository that lead to PII would be considered a very critical vulnerability. This should be reported to the technical contact immediately to prevent further exploitation from adversaries

upvoted 1 times

...

Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 365 discussion

Comments

BlackSkullz

SY0-701