What would John be considered as?

John, a security analyst working for an organization, found a critical vulnerability on the

organization’s LAN that allows him to view financial and personal information about the rest of the employees. Before reporting the vulnerability, he examines the information shown by the vulnerability for two days without disclosing any information to third parties or other internal employees. He does so out of curiosity about the other employees and may take advantage of this information later .

What would John be considered as?
A . Acybercriminal
B . Black hat
C . White hat
D . Gray hat

View Answer

Answer: A