Reference no: EM133940761

Questions

1. Why is an escalation path for communication essential in a penetration test?

a. It structures a cross-functional environment where everyone is responsible for their own piece of the test.

b. It adds bureaucratic layers to the communication path so only the most important information makes it to the top of the chain.

c. It protects individual pen testers from having to make risky or potentially damaging decisions on their own.

d. It eliminates the need for pen testers to make decisions regarding the test.

2. What are rules of engagement?

a. A clause that details the boundaries with regard to scope, price, and time frame

b. A document that outlines how the pen testing is to be conducted including timeline, location of test team, and transparency of testing.

c. A clause in the plan that states pen test results have a limited life span and are not a security guarantee.

d. An agreement between two parties listing the cost or price of which the pen test engagement must operate within.