A penetration tester cannot complete a full vulnerability scan because the client's WAF is blocking communications. During which of the following activities should the penetration tester discuss…

Question

Options

• AGoal reprioritization
• BPeer review
• CClient acceptance
• DStakeholder alignment

• A
  73% (35)
• B
  4% (2)
• C
  8% (4)
• D
  15% (7)

Explanation

Explanation

Goal Reprioritization is correct because when a technical obstacle (like a WAF blocking scans) prevents the planned testing activities from being completed, the penetration tester must revisit and adjust the engagement's objectives with the client - determining whether to whitelist the tester's IP, modify the scope, or reorder testing priorities to work around the limitation.

Peer review (B) is an internal quality control process where team members evaluate each other's work; it does not involve the client and would not resolve an external technical blocker. Client acceptance (C) occurs at the end of an engagement when the client formally approves the final deliverables - not mid-engagement when problems arise. Stakeholder alignment (D) refers to ensuring all parties agree on objectives typically before testing begins, not addressing mid-engagement technical issues.

Memory Tip: Think of "Goal Reprioritization" as a mid-course correction meeting - whenever something blocks the original plan during a pentest, the tester and client must regroup to decide what goals can still be achieved and how. If the path is blocked, you reprioritize!

No community discussion yet for this question.