PT0-002 Reporting and Communication Practice Test 4 — 15 Questions

Question 1

A penetration tester is writing a report and needs to assign a severity rating to a vulnerability. Which of the following scoring systems is specifically designed to consider Damage, Reproducibility, Exploitability, Affected users, and Discoverability?

Accepted Answer

DREAD. The DREAD model is a risk assessment model that uses these five categories.

Answer

STRIDE

Answer

OWASP Risk Rating

Answer

CVSS

Question 2

During a penetration test, a tester discovers a critical vulnerability that could allow remote code execution on an internet-facing server. According to best practices, what is the most appropriate immediate action?

Accepted Answer

Notify the client immediately about the critical finding.. Critical findings should be communicated immediately so the client can take urgent action.

Answer

Keep the finding confidential until retesting.

Answer

Exploit the vulnerability to demonstrate impact.

Answer

Wait until the final report to disclose the finding.

Question 3

A penetration tester is compiling evidence for a critical-severity SQL injection vulnerability. Which of the following is the most important piece of evidence to include in the report to demonstrate exploitability while remaining responsible?

Accepted Answer

A proof-of-concept script that retrieves the current database user (e.g., 'SELECT user()').. Proof-of-concept code should demonstrate the vulnerability without causing harm or exposing sensitive data.

Answer

A video of the full exploitation process, including data extraction.

Answer

A screenshot of the database table with all user credentials.

Answer

Raw network captures showing SQL injection attempts.

Question 4

A penetration tester is writing the executive summary of a report. Which of the following best describes the appropriate language and content for this section?

Accepted Answer

Business language, overall risk rating, key findings, and strategic recommendations.. The executive summary is for non-technical stakeholders, so it should use business language and focus on overall risk, key findings, and strategic recommendations.

Answer

Detailed technical descriptions of each vulnerability with CVSS scores.

Answer

A list of all tools used during the penetration test.

Answer

Step-by-step exploitation procedures for each finding.

Question 5

A penetration tester is recommending remediation for a critical vulnerability. Which of the following is the best example of a specific, actionable remediation step?

Accepted Answer

Upgrade Apache from version 2.4.49 to 2.4.51.. Effective remediation should be specific, including exact versions or commands.

Answer

Apply security patches.

Answer

Update the software to the latest version.

Answer

Fix the vulnerability.

Question 6

A penetration tester is presenting findings to a group of IT administrators. One administrator questions the validity of a finding, claiming it is not exploitable. How should the tester respond?

Accepted Answer

Present the proof-of-concept code and screenshots that demonstrate the exploit.. The tester should provide evidence to support the finding rather than being defensive or dismissive.

Answer

Insist that the finding is valid based on the tester's experience.

Answer

Escalate the issue to the project manager.

Answer

Agree to remove the finding from the report.

Question 7

During a penetration test, the tester discovers evidence of an ongoing ransomware attack on the client's network. Which of the following is the most appropriate action?

Accepted Answer

Notify the client immediately and recommend contacting law enforcement.. Evidence of criminal activity must be reported immediately to the client and may require law enforcement involvement.

Answer

Continue the test as planned and include the finding in the final report.

Answer

Disconnect from the network and destroy all evidence.

Answer

Try to stop the ransomware attack using penetration testing tools.

Question 8

Which section of a penetration testing report should include screenshots, affected systems, and remediation steps?

Accepted Answer

Technical findings. Technical findings contain detailed information for each vulnerability.

Answer

Scope and methodology

Answer

Appendices

Answer

Executive summary

Question 9

A penetration tester is prioritizing remediation recommendations. Which approach is most aligned with industry best practices?

Accepted Answer

Address critical vulnerabilities first, then high, then medium, with quick wins highlighted.. Prioritization should address critical/high vulnerabilities first, including quick wins that can be implemented rapidly.

Answer

Recommend fixing all vulnerabilities simultaneously.

Answer

Prioritize by ease of remediation regardless of severity.

Answer

List all findings in alphabetical order.

Question 10

A penetration tester is writing a report and needs to assign a custom severity rating for a vulnerability that has high business impact but low likelihood of exploitation. Using a custom severity based on business context (impact + likelihood), which rating is most appropriate?

Accepted Answer

Medium. High impact but low likelihood typically results in a medium severity when combining both factors.

Answer

Critical

Answer

High

Answer

Low

Question 11

Which of the following should be included in the appendix section of a penetration testing report?

Accepted Answer

Raw tool output and scan results. Appendices contain supporting details like scope, methodology, and raw tool output.

Answer

Remediation steps for each finding

Answer

Executive summary

Answer

Key findings and overall risk rating

Question 12

A penetration tester is documenting evidence for a finding and takes a screenshot. Which of the following is the most important metadata to include with the screenshot?

Accepted Answer

A timestamp. Timestamps provide context and prove when the evidence was captured.

Answer

The tool version used

Answer

The file size of the screenshot

Answer

The tester's name

Question 13

A penetration tester is preparing a presentation for both technical and executive audiences. Which TWO of the following are effective strategies for communicating findings to an executive audience?

Accepted Answer

Focus on business risk and financial impact.. Executives need high-level overviews and business impact, not technical details.

Answer

Discuss each vulnerability's CVSS vector string.

Answer

Use technical jargon and detailed exploit steps.

Answer

Include raw command-line output in slides.

Question 14

A penetration tester discovers a critical vulnerability that cannot be fully remediated immediately. The client asks for recommendations. Which THREE of the following should the tester include?

Accepted Answer

Implement compensating controls to reduce risk.. When full remediation is not possible, recommend compensating controls, prioritize critical fixes, and offer retesting.

Answer

Delete the finding from the report.

Answer

Ignore the vulnerability until the next test.

Question 15

A penetration tester is following responsible disclosure timelines. Which TWO of the following actions align with responsible disclosure practices?

Accepted Answer

Notify the software vendor immediately after discovery.. Responsible disclosure involves notifying the vendor and providing a reasonable time to fix before public disclosure.

Answer

Publish exploit code on a public forum immediately.

Answer

Publicly disclose the vulnerability the same day.

Answer

Sell the vulnerability information to the highest bidder.