A Red-Team Tester Has Been Contracted to Emulate the Threat

question 20

Multiple Choice

A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment. Which of the following actions should the tester take?

• A) Perform forensic analysis to isolate the means of compromise and determine attribution.
• B) Incorporate the newly identified method of compromise into the red team's approach.
• C) Create a detailed document of findings before continuing with the assessment.
• D) Halt the assessment and follow the reporting procedures as outlined in the contract.

---

Definitions:

Financial Reporting

The process of disclosing financial information to stakeholders, such as investors and creditors, to facilitate informed decision-making.

Countries

Nation-states defined by geographic boundaries, governance, sovereignty, and often a common culture or identity.

Incorporate

The process of legally declaring a corporate entity as separate from its owners, providing the benefits of limited liability and perpetual existence.

Legal Systems

The comprehensive framework of laws and regulations established within a country to govern its society and economy.