Câu 27: PT0-002: CompTIA PenTest+ Certification Exam

Which of the following is MOST important to include in the final report of a static application-security test that was written with a team of application developers as the intended audience?

1. A. Executive summary of the penetration-testing methods used
2. B. Bill of materials including supplies, subcontracts, and costs incurred during assessment
3. C. Quantitative impact assessments given a successful software compromise
4. D. Code context for instances of unsafe typecasting operations — đáp án hiện tại