PT0-001 · Question #148
Which of the following is the purpose of an NDA?
The correct answer is A. Outlines the terms of confidentiality between both parties. A Non-Disclosure Agreement (NDA) is a legal contract that establishes mutual confidentiality obligations between parties, such as a penetration tester and a client.
Question
Which of the following is the purpose of an NDA?
Options
- AOutlines the terms of confidentiality between both parties
- BOutlines the boundaries of which systems are authorized for testing
- COutlines the requirements of technical testing that are allowed
- DOutlines the detailed configuration of the network
How the community answered
(37 responses)- A95% (35)
- B3% (1)
- C3% (1)
Why each option
A Non-Disclosure Agreement (NDA) is a legal contract that establishes mutual confidentiality obligations between parties, such as a penetration tester and a client.
An NDA defines what information must be kept confidential, for how long, and the legal consequences of unauthorized disclosure between the signing parties. In penetration testing engagements, it protects sensitive client data, proprietary network details, and discovered vulnerabilities from being shared with third parties. It is a pre-engagement document focused solely on confidentiality, not on testing scope or technical parameters.
The boundaries of systems authorized for testing are defined in the Rules of Engagement (ROE) or Scope of Work document, not an NDA.
The permitted technical testing methods and requirements are outlined in the Rules of Engagement or Statement of Work (SOW), not an NDA.
Detailed network topology and configuration information would be found in network diagrams or technical documentation provided separately by the client, not in an NDA.
Concept tested: Purpose of NDA in penetration testing pre-engagement
Source: https://csrc.nist.gov/glossary/term/non_disclosure_agreement
Topics
Community Discussion
No community discussion yet for this question.