Great News!
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?
Correct Answer: C. Stop the assessment and inform the emergency contact.
During a penetration test, encountering a previously unknown, always-on VPN tunnel to a third-party supplier introduces significant ethical, legal, and scope-related concerns. The best course of action is to immediately stop testing and report the discovery to the client’s designated emergency contact.
Why?
Scope Limitations
Potential Legal Consequences
Ethical and Professional Responsibility
Why the Other Options Are Incorrect:
Utilize the tunnel as a means of pivoting to other internal devices.
Illegal and unethical → Unauthorized access to a third-party supplier.
Disregard the IP range, as it is out of scope.
While ignoring out-of-scope assets is usually best practice, this discovery is critical.
Scan the IP range for additional systems to exploit.
Violates the rules of engagement by targeting third-party infrastructure.
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams
