Question $1$

$4$

Points

What are the points that should be clearly stated in the Penetration Testing Contract?

Non$-$disclosure clause

Fees and project schedule

Confidential information

All the above

Question $2$

$4$

Points

Which of the following teams is used to give details of vulnerabilities present in the system?

Tiger team

White team

Black team

None of the above

Question $3$

$4$

Points

Why is it recommended to list the permitted items or attacks in the Penetration Testing Contract?

The list helps justify charging a high price when the client sees a long list of steps required

The list helps to internally manage the team of penetration testers and assign roles to each of them

The list will help in the create of schedule and the creation of a GANTT chart

The list helps to prevent miscommunication with the client which is very important when committing potentially illegal acts

Question $4$

$4$

Points

Why are Non$-$disclosure and confidentiality agreements important?

They protect the client by preventing the discussion of the existence of a testing agreement with print and television media

They serve to protect the client from negative publicity if a penetration tester is arrested

They primarily create protections for the penetration testers to make sure confidential penetration testing techniques and processes aren$$t shared with other companies

They primarily protect the client$$s confidential information and provide the protections clients need to allow penetration testing to occur

Question $5$

$4$

Points

Which of the following is NOT a common step to prepare for penetration testing?

Identify potential clients and send first communication to the potential clients

Creation of a test plan

Review engagement letter

Assign resources to subsets of test plan tasks