QUESTION: 29

A consulting company is completing the ROE during scoping.
Which of the following should be included in the ROE?

Cost of the assessment
Report distribution
Testing restrictions
Liability

Answer(s): C

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings.
Which of the following is most important for the penetration tester to define FIRST?

Establish the format required by the client.
Establish the threshold of risk to escalate to the client immediately.
Establish the method of potential false positives.
Establish the preferred day of the week for reporting.

Answer(s): B

Reveal Solution Next Question

QUESTION: 31

A penetration tester logs in as a user in the cloud environment of a company.
Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?

iam_enum_permissions
iam_prive_sc_scan
iam_backdoor_assume_role
iam_bruteforce_permissions

Answer(s): A

Reveal Solution Next Question

QUESTION: 32

A company becomes concerned when the security alarms are triggered during a penetration test.
Which of the following should the company do NEXT?

Halt the penetration test.
Conduct an incident response.
Deconflict with the penetration tester.
Assume the alert is from the penetration test.

Answer(s): C

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 9)

QUESTION: 29

QUESTION: 30

QUESTION: 31

QUESTION: 32

PT0-002 Discussions & Posts