CompTIA
PT0-002 · Question #26
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
The correct answer is A. Whether the cloud service provider allows the penetration tester to test the environment. Prior to testing in the cloud, the team will need to obtain the proper permissions from the provider and determine what type of testing will be allowed.
Engagement management
Question
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
Options
- AWhether the cloud service provider allows the penetration tester to test the environment
- BWhether the specific cloud services are being used by the application
- CThe geographical location where the cloud services are running
- DWhether the country where the cloud service is based has any impeding laws
How the community answered
(50 responses)- A92% (46)
- B2% (1)
- C4% (2)
- D2% (1)
Explanation
Prior to testing in the cloud, the team will need to obtain the proper permissions from the provider and determine what type of testing will be allowed.
Topics
#Cloud Penetration Testing#Authorization#Ethical Hacking#Rules of Engagement
Community Discussion
No community discussion yet for this question.