What does the rules of engagement (RoE) document primarily define?
PenTest+
COMPTIA_PT0_003Ready to test yourself?
A timed, blueprint-proportional exam drawn fresh from this bank โ with a per-domain score report.
๐ Free preview: showing 10 of 90 questions. Unlock the full bank โ every question, explanation, and reference.
Unlock all 90 questions โ10 questions across 5 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
10 questions in General/Pre-Engagement
General/Pre-Engagement
10 questions in topicScoping, rules of engagement, legal considerations, and testing types.
Why is written authorization to test critical before beginning a penetration test?
In a black-box test, what does the tester typically know about the target beforehand?
What distinguishes a gray-box test from a white-box test?
What is the purpose of a non-disclosure agreement (NDA) in a penetration testing engagement?
When testing a system hosted by a cloud provider, what must typically be obtained before testing begins?
What best characterizes a red team exercise compared to a standard penetration test?
What is the purpose of de-confliction during an engagement?
Why are data handling and retention requirements defined during pre-engagement?
Which consideration involves distinguishing between testing production systems versus non-production/legacy systems?