A penetration tester is hired to test a company's cloud infrastructure. The contract specifies that testing is limited to the company's own AWS account. During the test, the tester discovers that a misconfigured S3 bucket belongs to another company and contains sensitive data. What should the tester do?

Ignore the bucket because it is not part of the engagement.

Contact the other company directly to inform them of the misconfiguration.

Access the bucket to prove the misconfiguration and include it in the report.

Stop testing the bucket and report the misconfiguration to the client as a finding.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 6

Ethical Hacking Scope, Methodologies, and Frameworks EHE Practice Questions (Page 7)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

31questions here

7free pages

3concepts

Questions 31–31

31application · medium
A penetration tester is hired to test a company's cloud infrastructure. The contract specifies that testing is limited to the company's own AWS account. During the test, the tester discovers that a misconfigured S3 bucket belongs to another company and contains sensitive data. What should the tester do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Ethical Hacking Scope, Methodologies, and Frameworks EHE Practice Questions (Page 7)

Questions 31–31

Keep studying — Information Security and Ethical Hacking Foundations