A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?

Question

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.

Which of the following actions, if performed, would be ethical within the scope of the assessment?

harinder giri · Accepted Answer

Intercepting outbound TLS traffic

harinder giri · Answer

Exploiting a configuration weakness in the SQL database

harinder giri · Answer

Gaining access to hosts by injecting malware into the enterprise-wide update server

harinder giri · Answer

Leveraging a vulnerability on the internal CA to issue fraudulent client certificates

harinder giri · Answer

Establishing and maintaining persistence on the domain controller

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 129 - PT0-002 discussion

Suggested answer: B

0 comments