ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ98

VerifiedReport Writing and Post Testing Actions

Henderson has finished the pen-testing tasks and is now preparing the final report for the client. Henderson needs to include the scanning results that identified an SQL injection vulnerability and the different SQL queries he used to bypass web application authentication.

In which section of the pen-testing report should Henderson include this information?

Explanation

A comprehensive technical report contains the detailed vulnerability findings, supporting scan evidence, proof-of-exploitation material, and the specific commands or queries used. The methodology section documents the testing approach, while executive and opinion sections provide higher-level conclusions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!