A transit tester treats a successful Metasploit check as enough proof of business impact. What should they do instead?
Select an answer to reveal the explanation.
Short Explanation
A green light on a tool is like a smoke alarm chirp—it says look here, not the building is already gone. Clients need evidence and what it means for their business, not just a happy module status. Prove the story; don’t stop at the beep.
Full Explanation
Framework check or exploit success indicates a technical condition may exist, but impact for a transit agency depends on reachable data, trust boundaries, and operational consequence. Reports should include reproducible evidence, affected assets, and a risk narrative tied to the environment. Over-relying on tool status inflates or misstates findings and weakens remediation prioritization. Validation beyond the module output is a core professional expectation.