PT0-002 · Question #265
A penetration tester joins the assessment team in the middle of the assessment. The client has asked the team, both verbally and in the scoping document, not to test the production networks…
The correct answer is B. Requiring all testers to review the scoping document carefully. The scoping document is a document that defines the objectives, scope, limitations, deliverables, and expectations of a penetration testing engagement. It is an essential document that guides the penetration testing process and ensures that both the tester and the client agree…
Question
A penetration tester joins the assessment team in the middle of the assessment. The client has asked the team, both verbally and in the scoping document, not to test the production networks. However, the new tester is not aware of this request and proceeds to perform exploits in the production environment. Which of the following would have MOST effectively prevented this misunderstanding?
Options
- AProhibiting exploitation in the production environment
- BRequiring all testers to review the scoping document carefully
- CNever assessing the production networks
- DProhibiting testers from joining the team during the assessment
How the community answered
(44 responses)- A5% (2)
- B80% (35)
- C14% (6)
- D2% (1)
Explanation
The scoping document is a document that defines the objectives, scope, limitations, deliverables, and expectations of a penetration testing engagement. It is an essential document that guides the penetration testing process and ensures that both the tester and the client agree on the terms and conditions of the test. Requiring all testers to review the scoping document carefully would have most effectively prevented this misunderstanding, as it would have informed the new tester about the client's request not to test the production networks. The other options are not effective or realistic ways to prevent this misunderstanding.
Topics
Community Discussion
No community discussion yet for this question.