When you discover an urgent issue, high risk vulnerability, or evidence of a previous intrusion, what should you have in place during a penetration engagement?

• A. An open channel to share details publicly
• B. Correct points of contact and a secure means of communicating the final report
• C. A plan to immediately isolate the entire network
• D. A record of all user passwords

Answer: (B)

The key idea is having a prearranged, secure way to escalate and report findings. In a penetration test, if you encounter an urgent issue, high‑risk vulnerability, or evidence of a prior intrusion, you must already know who to contact and how to communicate, so you can alert the right people quickly and share the results securely. This includes validated points of contact and a protected channel (encrypted, out-of-band) for delivering the final report and any critical findings. This approach supports rapid triage, proper remediation, and maintains confidentiality and chain-of-custody for evidence.

Openly sharing details publicly would breach confidentiality and potentially expose the organization to more risk. Planning to isolate the entire network is too drastic a step to rely on without explicit authorization and coordination. Keeping a record of user passwords is insecure and violates policy and best practices for credential handling.