A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovering vulnerabilities, the company asked the consultant to perform the following tasks: Code review Updates to firewall settings Which of the following has occurred in this situation?
A) Scope creep
B) Post-mortem review
C) Risk acceptance
D) Threat prevention

Question

Quizplus · Accepted Answer

The situation describes "scope creep," where additional tasks (code review and firewall updates) are added beyond the original agreement of performing a penetration test.

A Company Planned for and Secured the Budget to Hire