Cyber Security Quiz
10 questions · no time limit
0:00
GOVERNANCE, RISK, AND COMPLIANCE
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
A company authorizes a penetration test of "all systems under example.com" for two weeks. During reconnaissance, the tester finds payroll.example.com, which is operated by a recently acquired subsidiary. The statement of work does not identify subsidiaries, and the acquired company has its own security management team.
What is the most ethically appropriate action before actively testing payroll.example.com?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F
Answers save as you go · flagged questions come back at the end