Planning & Scoping

During the pre-engagement phase, what is the PRIMARY purpose of the Rules of Engagement (RoE) document?

• ATo list in advance every vulnerability that the tester expects to find and exploit
• BTo define the scope, constraints, timing, and authorised activities of the test✓
• CTo provide the final report template to the client
• DTo calculate the total cost of the engagement

Answer: The Rules of Engagement formally define what testers may and may not do, including scope boundaries, timing windows, permitted techniques, and emergency contacts, protecting both parties legally and operationally.

A client wants assurance that a penetration test will not be confused with a real attack and that testers are legally protected. Which document grants explicit legal permission to perform the test?

• ANon-Disclosure Agreement (NDA) covering confidential information
• BAuthorization / 'get out of jail free' letter✓
• CMaster Service Agreement (MSA) setting the commercial terms
• DStatement of Work (SOW)

Answer: A signed authorization letter (often called a 'get out of jail free' card) provides written proof that the testing activity is authorised by the asset owner, which is essential to avoid violating computer misuse laws.

Which assessment type provides the tester with NO prior knowledge of the target environment, simulating an external attacker?

• ACrystal-box testing
• BWhite-box testing
• CGrey-box testing
• DBlack-box testing✓

Answer: Black-box testing gives the tester no internal knowledge such as source code, credentials, or network diagrams, closely simulating an outside attacker who must discover everything through reconnaissance.