A transit client requests raw password lists be sent over ordinary email. How should the tester handle sensitive evidence delivery?
Select an answer to reveal the explanation.
Short Explanation
Passwords in cleartext email are like mailing house keys on a postcard. Use the secure channel you agreed on, and redact when the full secret is not required.
Full Explanation
Sensitive evidence such as credential material must be transmitted only through approved secure channels with appropriate access control. Ordinary email is typically unsuitable for raw password lists. Redaction and need-to-know sharing reduce exposure while still enabling remediation. Document the transfer method in closeout notes when required by the client’s policies.