One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted
pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally
eliminate all risks. What is one of the first things you should do when hired?

A.
Interview all employees in the company to rule out possible insider threats.

B.
Establish attribution to suspected attackers.

C.
Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.

D.
Start the Wireshark application to start sniffing network traffic.