A penetration-testing team is conducting a physical penetration test to gain entry to a building. Which of the following is the reason why the penetration testers should carry copies of the engagement

The correct answer is D. As proof in case they are discovered. During a physical penetration test, testers may attempt to bypass physical security controls (tailgating, impersonation, lock picking, etc.). If discovered by security guards, employees, or law enforcement, they need to prove they have written authorization to be there. Engagemen

Engagement management

Question

A penetration-testing team is conducting a physical penetration test to gain entry to a building. Which of the following is the reason why the penetration testers should carry copies of the engagement documents with them?

Options

AAs backup in case the original documents are lost
BTo guide them through the building entrances
CTo validate the billing information with the client
DAs proof in case they are discovered

How the community answered

(26 responses)

A
4% (1)
C
4% (1)
D
92% (24)

Explanation

During a physical penetration test, testers may attempt to bypass physical security controls (tailgating, impersonation, lock picking, etc.). If discovered by security guards, employees, or law enforcement, they need to prove they have written authorization to be there. Engagement documents - such as the signed statement of work, rules of engagement, and emergency contact information - serve as legal proof of authorization and can prevent arrest or serious escalation. The other options are not the primary reason for carrying these documents during the physical test itself.

Topics

#Physical Pentesting#Rules of Engagement#Authorization#Legal Compliance

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice