CompTIA PenTest+ (PT0-003)Engagement ManagementMedium
A penetration testing firm's SOW requires the final report to include both an executive summary and a prioritized remediation roadmap. During the engagement, the tester recovers several weak password hashes using hashcat that map to service accounts with domain administrator privileges. Which recommendation is MOST appropriate to include in the remediation section for this finding?
- ARecommend enforcing strong password policies and rotating credentials for privileged service accounts
- BRecommend disabling nmap scanning on the internal network permanently
- CRecommend removing the OWASP Testing Guide from future assessments
- DRecommend the client purchase a new SIEM platform
Show answer & explanationAnswer & explanation
Correct answer: A. Recommend enforcing strong password policies and rotating credentials for privileged service accounts
Remediation recommendations should be specific and actionable, directly addressing the root cause of the finding. Since weak, crackable passwords were found on privileged service accounts, the appropriate recommendation is to enforce strong password policies and rotate the compromised credentials, directly mitigating the identified risk.
Why the other options are wrong
- B. Disabling nmap scanning affects the client's own operational tools, not the actual vulnerability found.
- C. The OWASP Testing Guide is a testing methodology reference, unrelated to remediation of this finding.
- D. A SIEM purchase is a broad, expensive recommendation unrelated to the specific weak-password finding.
Actionable Remediation Recommendations
Report recommendations must be specific and directly address the root cause of each finding, such as fixing weak credentials rather than generic or unrelated advice.
- Recommendations should map directly to the finding's root cause
- Overly generic recommendations (e.g., 'buy a SIEM') reduce report value
- Password-related findings typically call for policy enforcement and credential rotation
Memory trick: Fix the root, not the symptom — tailor advice to the actual finding.