A Penetration Tester Used an ASP

question 77

Multiple Choice

A penetration tester used an ASP.NET web shell to gain access to a web application, which allowed the tester to pivot in the corporate network. Which of the following is the MOST important follow-up activity to complete after the tester delivers the report?

• A) Removing shells
• B) Obtaining client acceptance
• C) Removing tester-created credentials
• D) Documenting lessons learned
• E) Presenting attestation of findings

---

Definitions:

Book Value Account

The value of an asset as recorded on the balance sheet, calculated as the cost of the asset minus depreciation or amortization.

Carrying Amount

The recorded book value of an asset or liability in the financial statements, after accounting for depreciation, amortization, and impairment.

Bonds Issued

The total number of bonds that a company or government has sold to investors but has not yet redeemed.

Effective Interest Method

An accounting practice used to amortize bond premiums or discounts over the life of the bond in a way that reflects a constant rate of interest.