Which of the following is a ROE component that provides a penetration tester with guidance on who and how to contact the necessary individuals in the event of a disaster during an engagement?

The correct answer is B. Communication escalation path. The communication escalation path is the Rules of Engagement (ROE) component that defines the chain of contact - specifying who to notify, in what order, and through what channels - when a critical or unexpected event occurs during a penetration test (e.g., system outage…

Engagement management

Question

Options

AEngagement scope
BCommunication escalation path
CSLA
DSOW

How the community answered

(57 responses)

A
9% (5)
B
86% (49)
C
2% (1)
D
4% (2)

Explanation

The communication escalation path is the Rules of Engagement (ROE) component that defines the chain of contact - specifying who to notify, in what order, and through what channels - when a critical or unexpected event occurs during a penetration test (e.g., system outage, accidental data exposure, discovery of active compromise by a real attacker). This ensures that the right people are reached quickly and that the engagement can be paused or terminated safely. The engagement scope (A) defines what is in and out of bounds. A Service Level Agreement (C) defines performance expectations. A Statement of Work (D) defines deliverables, timelines, and costs - none of these address emergency contact procedures.

Topics

#Rules of Engagement (ROE)#Communication plan#Escalation procedures#Incident management

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice