CSL Ethical Hacking & Incident Response 2

Question 1

Under the Computer Fraud and Abuse Act (CFAA), what distinguishes authorized penetration testing from criminal hacking?

Accepted Answer

Written permission from the system owner

Answer

Written authorization from the system owner is the critical legal distinction that makes penetration testing lawful under the CFAA.

Question 2

A penetration tester discovers a zero-day vulnerability during an engagement but it falls outside the agreed scope. What is the legally appropriate action?

Accepted Answer

Immediately notify the client and document the finding without exploiting it

Answer

Responsible disclosure requires notifying the client about out-of-scope critical findings without exploitation to stay within legal and ethical boundaries.

Question 3

Which legal doctrine allows incident responders to access third-party systems without a warrant when the system owner provides consent?

Accepted Answer

Third-party consent doctrine

Answer

The third-party consent doctrine allows consent from an authorized system owner or administrator to permit lawful access by incident responders.

Question 4

An ethical hacker finds credentials for a client's partner company during a test. What should the tester do?

Accepted Answer

Report the credentials to the client and stop any further use immediately

Answer

Discovered third-party credentials must be reported to the client immediately without being used, as testing the partner's systems would exceed authorized scope.

Question 5

Which incident response phase involves identifying the root cause and attack vector of a security breach?

Accepted Answer

Analysis/Identification

Answer

The Analysis/Identification phase focuses on determining what happened, how it happened, and confirming the scope of the incident.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL Ethical Hacking & Incident Response 2