Deconfliction is necessary when the penetration test:

Deconfliction is necessary when the penetration test:
A . determines that proprietary information is being stored in cleartext.
B. occurs during the monthly vulnerability scanning.
C. uncovers indicators of prior compromise over the course of the assessment.
D. proceeds in parallel with a criminal digital forensic investigation.

View Answer

Answer: D

Explanation:

Deconfliction is the coordination and communication process used to prevent interference between different activities or teams that are working in the same space. In the context of penetration testing, deconfliction would be most necessary when the penetration test is being conducted simultaneously with another activity, such as a criminal digital forensic investigation, to prevent one activity from adversely affecting the other.

A) Discovering that proprietary information is stored in cleartext would be a finding to report, but it wouldn’t necessarily require deconfliction.

B) Penetration testing and vulnerability scanning can be conducted together, but it’s not a situation that generally requires deconfliction.

C) While uncovering indicators of prior compromise is an important finding, it wouldn’t necessarily require deconfliction unless an active incident response or forensic investigation is also taking place.