PT0-002 · Question #210
During a penetration test, the domain names, IP ranges, hosts, and applications are defined in the:
The correct answer is C. ROE. The Rules of Engagement (ROE) document defines the technical and operational scope of a penetration test, including domain names, IP ranges, in-scope hosts, and applications. It establishes what the tester is authorized to test. The Statement of Work (SOW) defines deliverables…
Question
During a penetration test, the domain names, IP ranges, hosts, and applications are defined in the:
Options
- ASOW.
- BSLA.
- CROE.
- DNDA
How the community answered
(58 responses)- A7% (4)
- B2% (1)
- C90% (52)
- D2% (1)
Explanation
The Rules of Engagement (ROE) document defines the technical and operational scope of a penetration test, including domain names, IP ranges, in-scope hosts, and applications. It establishes what the tester is authorized to test. The Statement of Work (SOW) defines deliverables and contractual obligations. The Service Level Agreement (SLA) governs service availability expectations. The Non-Disclosure Agreement (NDA) covers confidentiality of information shared between parties. Only the ROE explicitly enumerates the technical targets and boundaries of the engagement.
Topics
Community Discussion
No community discussion yet for this question.