Which of the following describes the procedures a penetration tester must follow while conducting a test?
Choose an answer
Tap an option to check your answer.
Correct answer: Rules of engagement.
Why this is the answer
Rules of engagement (ROE) are a critical document outlining the scope, limitations, and procedures for a penetration test. They define what systems can be tested, the testing methods allowed, reporting requirements, and contact information, ensuring the test is conducted ethically and legally. Without clear ROE, a penetration tester might exceed authorized boundaries, causing unintended damage or legal issues. "Rules of acceptance" and "rules of understanding" are not standard cybersecurity terms for this concept. "Rules of execution" is too general and doesn't specifically address the comprehensive scope and limitations defined in ROE for a penetration test.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed