Planning & Scoping Flashcards

Which type of penetration test provides the tester with full knowledge of the internal network architecture, source code, and credentials?

Answer: White-box

White-box testing provides complete transparency including network diagrams, credentials, and source code, simulating an insider threat or detailed audit.

A penetration test scope document lists '192.168.1.0/24' as an in-scope target. During testing, the tester discovers a pivot to 10.10.0.0/16. What should they do?

Answer: Stop testing and notify the client before proceeding into out-of-scope systems

Accessing out-of-scope systems without authorization violates the rules of engagement and potentially the law; client notification and approval are required first.

What does a 'get-out-of-jail-free letter' represent in the context of a penetration testing engagement?

Answer: Written authorization proving the tester has permission to conduct the assessment

A get-out-of-jail-free letter is written authorization from the client that a tester can present to law enforcement if questioned during the engagement.

Which scoping activity helps identify systems that should be excluded from testing to prevent business disruption?

Answer: Fragility assessment

Fragility assessment identifies systems like legacy equipment, medical devices, or ICS components that could be damaged by testing, warranting exclusion.

A company hires a penetration testing firm to assess compliance with PCI DSS. How does this regulatory requirement affect the scope of the engagement?

Answer: It mandates specific targets, methodologies, and reporting formats

Compliance-driven engagements like PCI DSS specify which systems must be tested, what methodologies to follow, and how findings must be documented and reported.

When establishing communication protocols in the rules of engagement, what critical information should be agreed upon in advance?

Answer: Emergency contact procedures if testing causes an outage

Pre-agreed emergency contacts and escalation procedures ensure rapid response if testing accidentally causes system outages or service disruptions.

What is the key difference between a vulnerability assessment and a penetration test in terms of scope?

Answer: Vulnerability assessments identify weaknesses; penetration tests actively exploit them to demonstrate impact

Vulnerability assessments catalog potential weaknesses without exploitation, while penetration tests go further by actively exploiting vulnerabilities to demonstrate real-world impact.