A city wireless lab documents both the fake portal page and recovered passphrase artifacts as evidence. Why keep those artifacts for the report?
Select an answer to reveal the explanation.
Short Explanation
If you cannot show the fake page and the artifact you recovered, the finding is just a campfire story. Keep screenshots and files so someone else can follow the trail in the report. Do not skip evidence, leak secrets for clout, or pretend screenshots are a substitute for authorization.
Full Explanation
Documenting both the fake portal page and recovered passphrase artifacts as evidence keeps screenshots and credential artifacts available for report reproducibility and findings credibility. Municipal clients need to see what staff saw and how impact was proven. Evidence handling remains confidential—not a public leaderboard.
'Screenshots and files are forbidden; only verbal briefings count' fails because screenshots and files are not forbidden in favor of verbal briefings only. 'Evidence is required solely to republish credentials on a public leaderboard' fails because evidence is not required solely to republish credentials on a public leaderboard. 'Portal screenshots replace the need for written authorization in RoE' fails because portal screenshots do not replace written authorization in RoE.
Exam caveat: store secrets in controlled evidence systems—reproducibility ≠ publicity. Operational check: capture portal screenshots, hash or vault recovered test credentials, reference them in the civic report appendix, and apply retention/destruction schedules. Verify a second reviewer can understand the finding from artifacts alone. In municipal wireless operations, record the rationale in the engagement notes so future assessors know which control or technique class was chosen and which failure modes the rejected options would create for city services.