What is the purpose of the Rules of Engagement in a penetration testing plan?

To define the scope, testing hours, and limitations of the test.

To escalate identified vulnerabilities to senior management.

To celebrate the successful completion of testing.

To obtain legal and regulatory approvals.