OrganisationX has instructed a pen-tester to use whatever method of exploit or attack they can to try and shut down their system. Why is it important to include this instruction in a pen-test scope?

Question

Answer

Tests like this must be thoroughly communicated ahead of time and must be agreed to and formally approved by a relevant officeholder.

Answer

It authorises the pen tester to get help from friends or peers who are experts in other forms of pen testing.

Answer

It implies that the pen tester is not responsible for any permanent damage or data loss during the pen test.

Answer

It gives the pen tester unlimited permission to do anything with the Organisations systems and data.

Crowdly

OrganisationX has instructed a pen-tester to use whatever method of exploit or a...

Want instant access to all verified answers on lms.latrobe.edu.au?