During post-engagement activities, which area is addressed?

• A. Performing patch management
• B. Account cleanup
• C. Incident reporting
• D. Forensic imaging

Answer: (B)

Post-engagement activities focus on restoring the environment to its pre-engagement state and ensuring no test artifacts linger. The most important task is account cleanup: remove any temporary accounts, credentials, or permissions created during the assessment and revert configurations to baseline. This prevents backdoors and ensures governance and compliance. While patch management is a broader remediation activity and incident reporting or forensic imaging relate to incident handling, they are not the primary closeout focus of a pen-test. Cleaning up accounts directly addresses the closeout and risk reduction after the engagement.