PenTest+ Planning & Scoping 3

Question 1

Which type of penetration test provides the tester with full knowledge of the internal network architecture, source code, and credentials?

Accepted Answer

White-box

Answer

White-box testing provides complete transparency including network diagrams, credentials, and source code, simulating an insider threat or detailed audit.

Question 2

A penetration test scope document lists '192.168.1.0/24' as an in-scope target. During testing, the tester discovers a pivot to 10.10.0.0/16. What should they do?

Accepted Answer

Stop testing and notify the client before proceeding into out-of-scope systems

Answer

Accessing out-of-scope systems without authorization violates the rules of engagement and potentially the law; client notification and approval are required first.

Question 3

What does a 'get-out-of-jail-free letter' represent in the context of a penetration testing engagement?

Accepted Answer

Written authorization proving the tester has permission to conduct the assessment

Answer

A get-out-of-jail-free letter is written authorization from the client that a tester can present to law enforcement if questioned during the engagement.

Question 4

Which scoping activity helps identify systems that should be excluded from testing to prevent business disruption?

Accepted Answer

Fragility assessment

Answer

Fragility assessment identifies systems like legacy equipment, medical devices, or ICS components that could be damaged by testing, warranting exclusion.

Question 5

A company hires a penetration testing firm to assess compliance with PCI DSS. How does this regulatory requirement affect the scope of the engagement?

Accepted Answer

It mandates specific targets, methodologies, and reporting formats

Answer

Compliance-driven engagements like PCI DSS specify which systems must be tested, what methodologies to follow, and how findings must be documented and reported.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ Planning & Scoping 3