Which of the following is the MOST effective way to notify management of this finding and its importance?

A penetration test was performed by an on-staff technicians junior technician. During the test, the technician discovered the application could disclose an SQL table with user account and password information.

Which of the following is the MOST effective way to notify management of this finding and its importance?
A . Document Ihe findtngs with an executive summary, recommendations, and screenshots of the web apphcation disclosure.
B . Connect to the SQL server using this information and change the password to one or two non-critical accounts to demonstrate a proof-of-concept to management.
C . Notify the development team of the discovery and suggest that input validation be implemented on the web application’s SQL query strings.
D . Request that management create an RFP to begin a formal engagement with a professional penetration testing company.

View Answer

Answer: A