Câu 60: GPEN: GIAC Penetration Tester

You are conducting a penetration test for a private company located in the UK. The scope extends to all internal and external hosts controlled by the company. You have gathered necessary hold-harmless and non-disclosure agreements. Which action by your group can incur criminal liability under the computer MisuseAct of 1990?

1. A. Sending crafted packets to internal hosts in an attempt to fingerprint the operatingsystems
2. B. Recovering the SAM database of the domain server and attempting to crackpasswords — đáp án hiện tại
3. C. Installing a password sniffing program on an employee's personal computer withoutconsent
4. D. Scanning open ports on internal user workstations and exploiting vulnerableapplications