A penetration test is in the scoping phase of an engagement. Which of the following describes how a penetration tester would most effectively obtain the information necessary to begin testing?

Simply waiting for the client to spontaneously provide information is passive, inefficient, and often results in incomplete or disorganized details for the engagement.

While an email chain documents communications, it is not as structured or comprehensive as a dedicated pre-engagement survey for systematically collecting all required scoping information.

Asking previous penetration test providers is often not feasible due to NDAs and client privacy, and the information obtained may be outdated or irrelevant to the current engagement's specific scope.

Sending a pre-engagement survey or questionnaire to the client is the most effective and structured method for gathering critical information during the scoping phase. This ensures that all essential details, such as the scope, objectives, in-scope assets, technical specifications, and points of contact, are systematically collected directly from the client before testing commences.