Planning and Scoping PT0-003 Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   A penetration tester is planning a test on a system that supports a 24/7 customer-facing application. What is the most important consideration when determining the testing time frame?

   • APerforming the test during a scheduled maintenance window
   • BScheduling the test during a holiday
   • CChoosing a time when the tester is available
   • DSelecting a time that aligns with the lowest customer traffic
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A penetration tester is planning an engagement and needs to ensure that all testing activities are legally authorized. Which component of the Rules of Engagement provides this authorization?

   • ATesting schedule
   • BScope definition
   • CWritten authorization
   • DEmergency contacts
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A penetration tester is preparing a rules of engagement document for a client. The client wants to ensure that the tester does not access a specific HR system that contains sensitive employee data. Which element is most important to include in the rules of engagement?

   • AA list of IP addresses and hostnames that are explicitly out of scope.
   • BA schedule of when the tester will be on-site at the client's facility.
   • CA list of the tester's credentials and certifications to prove their expertise.
   • DA statement that the tester will use only passive techniques to avoid detection.
   Reveal Solution Discussion Select an answer first