1. How might a penetration tester successfully obtain the information required to begin testing in the scoping phase of a penetration testing?

A) By sending a pre-engagement survey to the client for them to fill out
B) By starting an email chain with business leadership so communications are documented
C) Both A and B
D) None of the above



2. Which of the following contractual documents is a confidentiality agreement that protects the proprietary information and intellectual property of a business?

A) Master Service Agreement (MSA)
B) Statement Of Work (SOW)
C) Written authorization letter
D) Non-Disclosure Agreement (NDA)



3. While performing penetration testing behind perimeter defenses, what does it mean to be provided limited access?

A) Client personnel will only be available for a limited period of time
B) Network access to the target systems or networks will only be permitted during pre-defined hours
C) The penetration tester is only provided with initial, basic connectivity to target systems
D) None of the above



4. Which of the following type of threat actors with red team assessment is usually conducted in a consistent manner?

A) Advanced Persistent Threat
B) Script Kiddie
C) Insider Threat
D) Hacktivist



5. According to Risk Management, what would be the final risk factor of vulnerability in the following figure?

A) High
B) Urgent
C) Medium
D) Low