A Penetration Test Was Performed by an On-Staff Junior Technician

question 99

Multiple Choice

A penetration test was performed by an on-staff junior technician. During the test, the technician discovered the web application could disclose an SQL table with user account and password information. Which of the following is the MOST effective way to notify management of this finding and its importance?

• A) Document the findings with an executive summary, recommendations, and screenshots of the web application disclosure.
• B) Connect to the SQL server using this information and change the password to one or two non-critical accounts to demonstrate a proof--of-concept to management.
• C) Notify the development team of the discovery and suggest that input validation be implemented with a professional penetration testing company.
• D) Request that management create an RFP to begin a formal engagement with a professional penetration testing company.

---

Definitions:

Job Rotation

A human resources strategy that involves moving employees between jobs or tasks to broaden their skills and increase job satisfaction.

Succession Management

The process of identifying and developing new leaders who can replace old leaders when they leave, retire, or die, ensuring the organization's continuity and effectiveness.

Baby Boomers

A demographic group born approximately between the years 1946 and 1964, known for significantly impacting economies and societies.

HR Managers

Human Resources Managers are professionals responsible for overseeing the recruitment, training, and welfare of the employees, ensuring compliance with employment laws, and supporting organizational goals.