A penetration testing team is planning a cloud assessment for a client that uses a multi-tenant SaaS application. The client wants the team to test the application's security, but the SaaS provider has not given permission. What is the most appropriate action?

Test the SaaS application using only passive techniques to avoid detection.

Limit the assessment to the client's configuration and integration points, and recommend the client request a security review from the provider.

Proceed with testing the SaaS application because the client owns the data.

Ask the client to sign a waiver that transfers liability to the client.

EC-CouncilCertified Penetration Testing Professional

Domain 7Objective 3

Cloud Penetration Testing CPENT Practice Questions (Page 11)

Part of the Specialized Testing and Reporting domain, which makes up ~23% of our current practice bank.

51questions here

11free pages

12concepts

12 Concepts in This Objective

Cloud Architecture Fundamentals
Cloud Threat Modeling
Cloud Service Provider Reconnaissance
Identity and Access Management (IAM) Testing
Cloud Storage Security Testing
Virtual Network and Compute Testing
Container and Orchestration Security
Serverless Function Testing
Cloud API Security Testing
Cloud Logging and Monitoring Assessment
Cloud Compliance and Governance Review
Cloud Penetration Testing Methodology

Questions 51–51

51application · medium
A penetration testing team is planning a cloud assessment for a client that uses a multi-tenant SaaS application. The client wants the team to test the application's security, but the SaaS provider has not given permission. What is the most appropriate action?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Cloud Penetration Testing CPENT Practice Questions (Page 11)

Questions 51–51

A penetration testing team is planning a cloud assessment for a client that uses a multi-tenant SaaS application. The client wants the team to test the application's security, but the SaaS provider has not given permission. What is the most appropriate action?

Keep studying — Specialized Testing and Reporting