Which risk is associated with exploitation in many assessment contexts?

• A. Data exposure with legal ramifications.
• B. Instant detection and no risk.
• C. No effect on system integrity.
• D. Only increased performance.

Answer: (B)

In assessment contexts, exploitation is often performed under strict monitoring, so the most likely risk is that the activity will be detected almost immediately by security controls and analysts. This rapid detection is intentional in many engagements to protect the environment and ensure prompt incident response; it highlights the fact that exploitation attempts are not invisible and can trigger alerts, logs, and containment actions. The idea of “no risk” isn’t realistic in security testing, since detection itself can have consequences, and the activity can impact how systems are treated during the engagement. Data exposure with legal ramifications can happen in some cases, but not every test involves exfiltrating data, and it’s not as universally guaranteed as the likelihood of being detected. Exploitation can affect system integrity, not leave it untouched, and it’s not about merely increasing performance.