After password-cracking tests, what data-handling practice is essential for sensitive credential files and cracking results?

• A. Remove and guard copies
• B. Archive and share with organization
• C. Upload to cloud
• D. Ignore and leave as is

Answer: (A)

Protecting sensitive credentials and cracking results hinges on removing and guarding copies after testing. When artifacts like credential files and cracking outputs are left around, they become ripe targets for misuse if the system is compromised or if access controls lapse. The best practice is to dispose of unnecessary copies securely—delete temporary files, scrub artifacts, and ensure backups that might contain sensitive data are also cleared or protected. If you must retain data for evidence or reporting, store it only in a tightly controlled, encrypted repository with strong access controls and auditing, and limit who can view it. Archiving and sharing with others or uploading to cloud services can be appropriate in carefully governed workflows, but they introduce additional risk and should be governed by strict access controls and retention policies. Ignoring or leaving data as-is is unsafe and unacceptable.