Question $1$

$4$

Points

Identify the team members who are involved in the Penetration Testing team.

Network Penetration Testers

Policy Penetration Testers

Report Writers

All of the above

Question $2$

$4$

Points

The $\_\_\_\_\_\_\_\_\_\_\_\_\_\_$ document helps in gathering basic information about the client$$s expectations for the penetration test and contains the following information: client contact details, pen$-$testing objectives, scope, and a list of networks and devices to be tested.

Client Information

Penetration Test Report

Preliminary Information Request

Pre$-$penetration Test Report

Question $3$

$4$

Points

Which of the following statement is TRUE for $$Penetration Testers$?$

You will deal with very little paperwork

You must be expert in report writing

You must have comprehensive knowledge of attackers, tools, techniques, and procedures to compromise information system

All of the above

Question $4$

$4$

Points

What is the best description of Rules of Engagement $($ROE$)?$

It is the formal permission to conduct a penetration testing that states the agreed upon process for the testing

It lists the scope and the expected ROI for the testing

It defines the length of time for the penetration testing and the elements that need to be included in the final report

It lists when the client will help the penetration testing with law enforcement

Question $5$

$4$

Points

Which of the following is true about project scoping for penetration testing?

Project scoping should be done in isolation from the client to produce the best results from the actual penetration testing

Without proper project scoping, there is a large chance for project failure due to assessment requirements not having the proper definitions or defined procedures

Project scoping is an optional step in the preparation for penetration testing, since the scope generally changes once you start the testing and you end up going wherever you find vulnerabilities

Project scope should be at most one page in a proposal submission to limit potential legal liability