A penetration tester is conducting a test after hours and notices a critical system was taken down. Which of the following contacts should be notified first?
A penetration tester is conducting a test after hours and notices a critical system was taken down. Which of the following contacts should be notified first?
When conducting a penetration test, the primary point of contact within an organization should be notified first if any issues arise, including the unintentional taking down of a critical system. This is because the primary contact is designated to handle the coordination and response to issues during the test, including escalating to other contacts such as technical or emergency contacts if necessary. Proper communication protocol requires informing the designated main point of contact to ensure that all subsequent actions are appropriately managed and documented.
clearly B : emergency contact for critical situations
Critical system = Emergency
D. Primary: The primary contact is the designated main point of contact for the penetration test. This person is responsible for overseeing the test and should be informed first about any critical issues, including system downtime. The primary contact can then coordinate with the technical team or escalate as necessary. A. Secondary: The secondary contact is typically the backup contact person. The primary contact should be notified first. B. Emergency: Emergency contacts are usually reserved for situations that involve immediate danger to people or require urgent response from emergency services. While taking down a critical system is serious, it typically doesn’t necessitate contacting emergency services. C. Technical: Technical contacts might be relevant for resolving the issue, but they should be informed through the primary or designated contacts to ensure proper communication protocol.
yes B because it's after hours.
Not sure about this but I'm going with D primary contact. The correct answer is D. Primary. In most organizations, the primary contact is the first point of contact when an issue arises. They are typically responsible for managing the situation and coordinating the response. If a critical system goes down during a penetration test, the primary contact should be notified first so they can take appropriate action. If the primary contact cannot be reached, then the secondary contact would be next. The emergency and technical contacts would likely be involved as needed based on the direction from the primary or secondary contacts.
answer is B critical system.
It is an emergency
B. first it is out of hours, and second it iscritical system taken down. The emergency contact is who to contact in this situation
It's after hours, the primary went home for the night. On-calls for after hours, which make them emergency contacts.