CompTIA PenTest+ (PT0-002) — Question 100

A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client's IP address. The tester later discovered the SOC had used sinkholing on the penetration tester's IP address.
Which of the following MOST likely describes what happened?

Answer options

• A. The penetration tester was testing the wrong assets.
• B. The planning process failed to ensure all teams were notified.
• C. The client was not ready for the assessment to start.
• D. The penetration tester had incorrect contact information.

Correct answer: B

Explanation

The correct answer is B because effective communication and planning are crucial in a penetration test to ensure all teams are aware of the activities, preventing actions like sinkholing. Option A is incorrect as the tester was focused on the right assets; C is wrong because the assessment had already started; D is not relevant since the issue was with the SOC's actions, not the tester's contact details.