In an Unprotected Network File Repository, a Penetration Tester Discovers

question 37

Multiple Choice

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name-serial_number> . Which of the following would be the best action for the tester to take NEXT with this information?

• A) Create a custom password dictionary as preparation for password spray testing.
• B) Recommend using a password manage/vault instead of text files to store passwords securely.
• C) Recommend configuring password complexity rules in all the systems and applications.
• D) Document the unprotected file repository as a finding in the penetration-testing report.

---

Definitions:

Job Burnout

A state of physical, emotional, or mental exhaustion, combined with doubts about competence and the value of work, often due to prolonged stress.

Stressors

The things that cause stress.

Core Competencies

Unique abilities and advantages that an organization possesses, allowing it to outperform competitors, such as specific knowledge, skills, or resources.

Employee Assistance Programs

Programs offered by employers to help employees deal with personal problems that might adversely impact their job performance, health, and well-being.