A penetration tester joins the assessment team in the middle of the assessment. The client has asked the team, both verbally and in the scoping document, not to test the production networks. However, the new tester is not aware of this request and proceeds to perform exploits in the production environment. Which of the following would have MOST effectively prevented this misunderstanding?
- A. Never assessing the production networks
- B. Requiring all testers to review the scoping document carefully
- C. Prohibiting exploitation in the production environment
- D. Prohibiting testers from joining the team during the assessment
Reveal Solution
Discussion
Correct Answer: B 🗳️
Explanation: Only visible for PrepAwayTest members. You can sign-up / login (it's free).