Q16
Single choice
A penetration tester initiated the transfer of a large data set to verify a proof-of-concept attack as permitted by the ROE. The tester noticed the client's data included PII, which is out of scope, and immediately
stopped the transfer.
Which of the following MOST likely explains the penetration tester's decision?