Penetration Testing Scoping and Engagement CPENT Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A penetration tester is negotiating the rules of engagement with a client. The client wants to include a clause that allows the tester to use any means necessary to gain access, including social engineering of employees. However, the client's legal team is concerned about potential liability. What is the best way to address this?

   • ARefuse to perform social engineering because it is unethical.
   • BPerform social engineering without documenting it in the rules of engagement to avoid legal issues.
   • CInclude the clause as requested, as the client has the authority to authorize social engineering.
   • DDraft a specific social engineering addendum that defines the scope, targets, and legal protections for both parties.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A penetration test has uncovered a critical vulnerability in a client's payment processing system. The client's legal team is concerned that the report could be used in a lawsuit. What is the best way to protect the client while still providing the necessary information?

   • AProvide a verbal report only, with no written documentation.
   • BDestroy all evidence of the vulnerability to avoid legal exposure.
   • CRefuse to include the vulnerability in the report to protect the client.
   • DInclude the findings in the final report, but mark the report as confidential and attorney-client privileged.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A penetration tester is communicating the rules of engagement to a client's legal team. The legal team wants to ensure that the testing is authorized and that the tester will not be held liable for any damage. What is the most important document to provide to the legal team?

   • AA detailed schedule of the testing activities.
   • BA list of the tools that will be used during the test.
   • CA copy of the tester's certification and insurance policy.
   • DA signed authorization letter from the client that grants permission to test the specified systems.
   Reveal Solution Discussion Select an answer first
5. 29application · easy

   A penetration tester is planning an engagement for a client that wants to assess the security of their internal network. The client has provided the tester with full network diagrams, source code for critical applications, and administrative credentials. This type of engagement is best described as:

   • AGrey-box, because the tester has some knowledge but not all.
   • BWhite-box, because the tester has complete knowledge of the environment.
   • CRed-team, because the tester is simulating an attacker with insider knowledge.
   • DBlack-box, because the tester is testing the internal network from a user's perspective.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A penetration tester is working with a client to define the deliverables for an engagement. The client wants a report that is understandable by both technical and non-technical stakeholders. What is the best approach to achieve this?

   • ACreate a report with an executive summary for non-technical stakeholders and a detailed technical section for IT staff.
   • BCreate a report that only includes the executive summary and omits technical details.
   • CCreate a single report that is highly technical and assumes the reader has a deep understanding of security.
   • DCreate two separate reports: one for technical staff and one for non-technical stakeholders.
   Reveal Solution Discussion Select an answer first