Penetration Testing Scoping and Engagement CPENT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A penetration testing engagement is nearing completion. The client asks for a deliverable that will help their IT team understand how to fix the vulnerabilities found. Which deliverable best meets this need?

   • AAn executive summary that only lists the number of findings by severity
   • BA detailed technical report with step-by-step remediation guidance for each finding
   • CA recording of the tester's screen during the engagement
   • DA raw scan output file from the vulnerability scanner
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is legal authorization a critical component of rules of engagement?

   • AIt protects the tester from liability by granting explicit permission to test the specified systems
   • BIt guarantees the test will not cause any system downtime
   • CIt ensures the tester has the technical skills to perform the test
   • DIt allows the tester to bypass all security controls
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A penetration tester is drafting a rules of engagement (RoE) for a client that has a strict change-management process. The client requires that any testing that could affect production systems be approved by a change advisory board (CAB) at least 48 hours in advance. The tester plans to run a vulnerability scan that may cause a temporary disruption. What is the best way to handle this in the RoE?

   • ASchedule the scan during a maintenance window that is already approved by the CAB.
   • BState that the tester will not be held responsible for any disruptions caused by the scan.
   • CPerform the scan without notifying the CAB to avoid delays.
   • DInclude a clause that requires the tester to submit a change request to the CAB before any potentially disruptive testing.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A penetration tester is scoping an engagement for a client that has a hybrid infrastructure with on-premises servers and cloud resources. The client wants to test the entire environment but has a limited budget. The tester must decide which parts of the environment to include in the scope. The client has identified the most critical assets as the customer database and the payment processing system. What is the most appropriate approach?

   • AInclude all systems in the scope and negotiate a higher budget with the client.
   • BPerform a quick scan of all systems but only do a deep dive on the critical assets.
   • CTest only the on-premises servers and exclude the cloud resources to reduce costs.
   • DPrioritize the critical assets and include them in the scope, while excluding less critical systems to stay within budget.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A penetration tester is preparing a rules of engagement (RoE) for a client that has a strict policy against social engineering attacks. The client wants to test the technical security of their systems but does not want any social engineering attempts. What should the tester include in the RoE?

   • AA clause that does not mention social engineering, leaving it open to interpretation.
   • BA clause that requires the tester to obtain permission from each employee before attempting social engineering.
   • CA clause that allows social engineering attacks but only during off-hours.
   • DA clause that explicitly prohibits social engineering attacks and limits the test to technical vulnerabilities.
   Reveal Solution Discussion Select an answer first