Exam PT0-002 topic 1 question 187 discussion

Actual exam question from CompTIA's PT0-002

Question #: 187
Topic #: 1

A tester who is performing a penetration test discovers an older firewall that is known to have serious vulnerabilities to remote attacks but is not part of the original list of IP addresses for the engagement. Which of the following is the BEST option for the tester to take?

A. Segment the firewall from the cloud.
B. Scan the firewall for vulnerabilities.
C. Notify the client about the firewall.
D. Apply patches to the firewall.

Show Suggested Answer

Suggested Answer: C 🗳️

by RRabbit_111 at Jan. 23, 2023, 11:20 p.m.

Comments

Submit Cancel

RRabbit_111

Highly Voted 1 year ago

Selected Answer: C

C. Notify the client about the firewall. It is important for the tester to inform the client about the discovery of the firewall as soon as possible, so that the client can take appropriate actions to secure it. Segmenting the firewall from the cloud, scanning it for vulnerabilities, and applying patches are all actions that should be taken in consultation with the client, as they may have specific security or business requirements that need to be considered.

upvoted 6 times

...

cy_analyst

Most Recent 11 months, 1 week ago

Selected Answer: C

In a penetration testing engagement, the tester should always follow the rules of engagement defined by the client. If the older firewall was not included in the original list of IP addresses to test, then it is likely that the client did not want it to be tested or was unaware of its existence.

upvoted 3 times

...