(1) Planning a Pentest

Question 1

What are the three critical components of a pentest?

Answer 1

The three critical components of a pentest are:

-Timing
-Scope
-Authorization

Question 1

Within the components of a planned pentest, describe timing

Answer 1

Within the components of a planned pentesrt, timing considerings involve a few questions:

-When will the test take place?
-Will employees be told that it is happening?
-Will it have any impact to business operations?

Question 2

Within the components of a planned pentest, describe Scope

Answer 2

When it comes to the scope component of a planned pentest, these parameters should be considered:

What has everyone agreed on in terms of the scope of the pentest?

Are certain systems included or not included in the pentest?

Question 3

Within the components of a planned pentest, describe Authorization

Answer 3

When it comes to the Authorization side of a planned pentest, this should be considered:

Who is the person who is approving the pentest?

What should a pentester do if they are addressed by someone who takes note of their activity?