Report Writing and Post-Testing Actions CPENT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   During a penetration test, you captured plaintext credentials, customer PII from a database, and internal network diagrams. You need to deliver the final report to the client. What is the most appropriate way to handle this sensitive data?

   • AEmail the report as a plain-text attachment to the client's IT manager for convenience.
   • BOmit the credentials and PII from the report and only describe the vulnerabilities in general terms.
   • CInclude the credentials and PII in the report as evidence, encrypt the report file, and deliver it via the client's approved secure file transfer mechanism.
   • DStore the report on your personal cloud drive and share the link publicly so the client can access it from anywhere.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   You are presenting the final penetration test report to the client's stakeholders, including the CISO, IT managers, and developers. The CISO asks why a critical finding was rated Critical when the exploit required physical access to a server room. How should you respond?

   • AExplain that the rating considered the impact of full server compromise, even though the likelihood is lower due to the physical access requirement, and clarify how the matrix balances both factors.
   • BState that physical access is not a factor in risk ratings and the Critical rating stands.
   • CAgree that the rating is too high and offer to downgrade it to High to better reflect the physical access requirement.
   • DRedirect the question to the technical findings section and suggest the CISO review the evidence there.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   You are documenting a complex vulnerability chain: an attacker can exploit an SSRF in a web application to access an internal metadata service, obtain temporary credentials, and then use those credentials to access an internal database. The client's developers need to understand the full chain to remediate it. What is the most effective way to document this in the technical findings section?

   • ADocument the full attack chain as a single finding with each step's evidence, impact, and a remediation plan that addresses each component.
   • BDocument the chain in the executive summary and leave the technical details out of the findings section.
   • CDocument only the final database access as the finding, since that is the highest-impact outcome.
   • DDocument each vulnerability as a separate finding with its own evidence and remediation, without referencing the chain.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   You are writing an executive summary for a penetration test report. The test found a critical vulnerability that could allow an attacker to take over the entire network, and several low-severity issues. The client's executives are concerned about the cost of remediation. What should the executive summary include?

   • AA list of all vulnerabilities with their CVSS scores.
   • BA clear statement of the critical risk, its potential business impact, and a high-level recommendation to remediate it as a priority.
   • COnly the critical vulnerability, omitting the low-severity issues to keep the summary short.
   • DA detailed cost-benefit analysis of each remediation option.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   You are writing a penetration test report that includes a finding with screenshots showing sensitive data. The client has a policy that all reports must be encrypted when sent via email. What is the most appropriate action?

   • ASend the report without encryption because the email system is internal.
   • BSend the report in a zip file without a password to make it easier for the client to open.
   • CRemove the screenshots from the report to avoid the need for encryption.
   • DEncrypt the report file and send it via email, and provide the decryption password through a separate secure channel.
   Reveal Solution Discussion Select an answer first