Which of the following statements pertaining to ethical hacking is incorrect?
A.
An organization should use ethical hackers who do not sell auditing, consulting, hardware,
software, firewall, hosting, and/or networking services
B.
Testing should be done remotely
C.
Ethical hacking should not involve writing to or modifying the target systems
D.
Ethical hackers should never use tools that have potential of exploiting vulnerabilities in the
organizations IT system.
Be mindful of the double negative…
If statement D is the correct choice, then it must mean that ethical hackers should ALWAYS use tools that could potentially exploit the vulnerabilities. Which is complete BS. And by the way, D is saying the same thing as E.
In ethical hacking remote testing is not mandatory. So I would say B is the correct choice.
Oh yeah???? YOU SMELL!