CompTIA PenTest+ (PT0-002) — Question 152

Which of the following situations would require a penetration tester to notify the emergency contact for the engagement?

Answer options

• A. The team exploits a critical server within the organization.
• B. The team exfiltrates PII or credit card data from the organization.
• C. The team loses access to the network remotely.
• D. The team discovers another actor on a system on the network.

Correct answer: D

Explanation

The correct answer is D, as discovering another actor on the network could indicate a security breach or unauthorized access that needs immediate attention. Options A and B involve actions that are part of the testing process, while C relates to a loss of access rather than a security incident requiring immediate notification.