A court IT manager frames success as 'get in and root everything,' while the engagement objective is protecting case data. What should the tester reinforce?
Select an answer to reveal the explanation.
Short Explanation
CTF high scores feel great; clients pay for risk answers. If the goal is protecting case data, show paths that threaten that data — not just every root shell you can collect. Objectives steer the work.
Full Explanation
Professional penetration tests serve client risk priorities documented in engagement objectives. A pure capture-the-flag mindset that maximizes roots without tying findings to business impact produces incomplete value. Evidence should illuminate how weaknesses threaten agreed assets such as case data. Tool dumps without impact narrative fail commercial expectations.