Study. uk . com
  1. Home
  2. All questions
  3. Question 41

CompTIA Security+ study material · question 41 of 611

Which two items must the rules of engagement for a penetration test establish? Choose two.

  1. Scope and permitted techniques
  2. Escalation contacts and timing
  3. The tester's hourly rate
  4. The CVSS scores of expected findings
Show the answer

Answer: A. Scope and permitted techniques
B. Escalation contacts and timing

Without agreed scope, timing, techniques and contacts, the tester's activity is indistinguishable from an attack.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 2 Security Testing and Examination Overview

Challenge yourself on this topic → Study as cards