Which of the following conditions should a penetration tester specifically test for when performing an assessment?

A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals.

Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).
A . Cleartext exposure of SNMP trap data
B . Software bugs resident in the IT ticketing system
C . S/MIME certificate templates defined by the CA
D . Health information communicated over HTTP
E . DAR encryption on records servers

View Answer

Answer: D,E