A company hires a cybersecurity consultant to perform penetration tests and review the rules of engagement documents. What are three examples of typical elements in the rules of engagement document? (Choose three.)
- testing timeline
- payment schedule
- location of testing
- non-disclosure agreement
- preferred method of communication
- unknown-environment testing condition
Explanation: The rules of engagement document specify the conditions under which the security penetration testing engagement will be conducted. Examples of the elements that are typically included in the rules of engagement document are:
- Testing timeline
- Location of testing
- Preferred method of communication
- The time window of the testing
- The security controls that the cloud potentially detects or prevent test
- IP addresses or networks from which testing will originate
- Types of allowed or disallowed tests
Exam with this question: 2.4.3 Quiz - Planning and Scoping a Penetration Testing Assessment Answers
Please login or Register to submit your answer