PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ304

Engagement Management

Testing and reporting activities are finished. A penetration tester must confirm that exploited systems have been returned to their pre-engagement state. Which action would be most appropriate for the tester to take?

  • A Terminate the running command-and-control payload.
  • B Provide the customer with a list of the changes made.
  • C Replace environment variables with their original values.
  • D Put in a change request ticket to reimage the system.
Explanation

A complete post-engagement cleanup includes providing the customer with a record of all changes made during testing so the customer can validate restoration to the original environment. This supports verification of any altered configurations, files, accounts, services, or other artifacts.

Community Discussion

No comments yet. Be the first to start the discussion!