Exam CS0-002 topic 1 question 24 discussion

I think someone changed what they were trying to ask halfway through writing this garbage question.... Verbiage on stuff is wack.... Being afforded a short window to perform Vuln Scans/Pentests is unbeneficial, not dangerous though... What would be dangerous to the client's network would be to scan things that weren't in the Scoping Document. That's what outlines the (5 W's/How) of your scans/tests. Two things you don't want are unauthorized tests and scope creep. God forbid you break something outside the scope... You're liable.

From my experience on the red side, my biggest fear is always involves systems that are out of scope. Definitely B.

I think it s B

They are making assumption that the pentester is incompetent. I am surprised Nuclear detonation isn't one of the option.

B. Testing Outside Contractual Scope

B. Testing Outside Contractual Scope: This scenario is potentially the most dangerous. When testing goes beyond the agreed-upon scope, it could lead to legal issues, unintended disruptions, or damages to systems and networks that were not prepared or authorized for testing. There's a significant risk of causing operational, reputational, and financial harm.

It's answer B

A. There is a longer period of time to assess the environment. A longer period of time to assess the environment during a vulnerability assessment/penetration test can be more dangerous to the client environment as it provides an opportunity for attackers to exploit vulnerabilities and take advantage of any weaknesses in the system. This potentially gives attackers more time to gather sensitive information, create persistent backdoors into the system, and launch attacks against the organization. The other options are not as dangerous as a longer period for assessment.

B. Always B, hitting systems out of scope ramps up the pucker factor from a red teamer.

The fact that the pentest is against client suggests that is within the scope. Although, it being just pentesting and not an actual attack, you are also trying to keep it short to minimise disruption. Correct answer is C.

b correct answer

Acting outside the scope is really dangerous.

It's B, I work as a Cyber Security Analyst, and the Right to Audit is a must in a contract.

It's B.

B sure

I think its B

Definitely B