GAQM Exam CCCP-001 Topic 11 Question 79 Discussion

Actual exam question for GAQM's CCCP-001 exam

Question #: 79
Topic #: 11

A security administrator is being hired to perform a penetration test of a third-party cloud provider as part of an annual security audit. Which of the following is the FIRST step that must be performed?

AAttempt known exploits

BScan for vulnerabilities

CResearch publicized incidents

DGet written permission

Show Suggested Answer

Suggested Answer: D

by Erick at Apr 12, 2024, 02:56 AM

Limited Time Offer

25%

Off

Get Premium CCCP-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephaine

5 months ago

I believe scanning for vulnerabilities should be the first step so we know where to focus our efforts.

upvoted 0 times

...

Demetra

6 months ago

But shouldn't we research publicized incidents first to see if there are any known vulnerabilities?

upvoted 0 times

...

Renea

6 months ago

I agree, getting written permission is important to ensure legal compliance.

upvoted 0 times

...

Lizbeth

6 months ago

I think the first step should be to get written permission.

upvoted 0 times

...

Elmira

6 months ago

upvoted 0 times

...

Gilma

6 months ago

upvoted 0 times

...

Chandra

7 months ago

upvoted 0 times

...

Elly

7 months ago

upvoted 0 times

...

Lashawnda

8 months ago

You know, I bet someone's going to pick option B just to be 'edgy' or something. But that's a hard pass for me - I value my freedom too much.

upvoted 0 times

...

Tanesha

8 months ago

Option D is the only sensible choice. I don't know about you, but I'm not trying to end up in handcuffs over this exam question.

upvoted 0 times

...

Tien

8 months ago

Seriously, who would even consider option A? That's just asking for trouble. We need to dot our i's and cross our t's here, folks.

upvoted 0 times

...

Scot

8 months ago

Haha, can you imagine just diving in and trying random exploits without permission? That's a surefire way to get arrested - or at the very least, fired!

upvoted 0 times

...

Marvel

8 months ago

I agree, D is the only correct answer here. Performing a penetration test without explicit authorization could be considered hacking, and that's not something we want to risk.

upvoted 0 times

Dahlia

7 months ago

Agreed. It's a legal requirement.

upvoted 0 times

...

Ryan

7 months ago

D is crucial. We need permission first.

upvoted 0 times

...

Sheron

8 months ago

This is a tricky question, but I think the answer is obvious - we need to get written permission first before doing anything else. Attempting exploits or even scanning for vulnerabilities without permission could get us in legal trouble.

upvoted 0 times

...