easyMultiple Choice
PT0-002 Practice Question: A penetration tester is preparing the executive…
A penetration tester is preparing the executive summary of a penetration test report. Which of the following BEST describes the primary audience and appropriate level of technical detail?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
High-level findings and business impact for management and executives.
Option B is correct because the executive summary is written for management and executives, who need high-level findings and business impact rather than technical minutiae. This audience typically lacks deep technical background and focuses on risk, cost, and strategic decisions, so the summary should translate technical issues into business consequences. Option A is wrong because a methodology narrative for other penetration testers belongs in the technical body of the report, not the executive summary. Option C is wrong because detailed technical analysis for system administrators is also part of the technical sections, not the executive-level overview. Option D is wrong because step-by-step exploitation procedures for developers are highly technical content inappropriate for an executive summary.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A narrative of the testing methodology for other penetration testers.
Why it's wrong here
Methodology narratives for fellow testers belong in the technical body of the report, not the executive summary, which serves business leadership. Tester-oriented methodology detail is appropriate when documenting reproducibility for peer review, not for an executive audience.
- ✓
High-level findings and business impact for management and executives.
Why this is correct
Executives need business risk and impact, not exploit payloads or command output. Framing findings around likelihood, affected assets and remediation cost lets non-technical decision-makers prioritise spend, satisfying the executive-summary purpose. Technical reproduction steps belong in the detailed findings section instead.
- ✗
Detailed technical analysis for system administrators.
Why it's wrong here
An executive summary addresses business leadership, so detailed technical analysis for administrators belongs in the technical findings section instead. Administrator-level detail is appropriate for remediation appendices, not the summary that frames risk and impact for decision-makers.
- ✗
Step-by-step exploitation procedures for developers.
Why it's wrong here
Executive summaries address business stakeholders, not developers, so step-by-step exploitation procedures belong in the technical findings section. It is tempting because developers do remediate vulnerabilities, but the summary's purpose is risk communication to leadership, and this level of detail would obscure that message.
Go deeper
Related to this question
Learn chapter
Phishing Campaigns in Penetration Testing
Key term
Exploitation
Exploitation is the act of using a vulnerability or weakness in a system, network, or application to gain unauthorized access, cause damage, or extract data.
Key term
Executive summary
An executive summary is a concise overview of a longer document that highlights the key points, findings, and recommendations so busy stakeholders can quickly grasp the essential information without reading the full report.
About these practice questions
This PT0-003 question is part of Courseiva's 777-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.