CompTIA PenTest+ (PT0-003) - 340 Questions

1. A penetration tester is about to begin an engagement for a financial services company. Before any testing begins, which document formally authorizes the tester to conduct offensive security activities against the client's systems?

2. A security consultant is preparing pre-engagement documentation for a new client. The client wants to ensure that any sensitive business information shared during the engagement remains confidential. Which document should the consultant prioritize obtaining FIRST?

3. A penetration tester is hired to assess a company that uses AWS-hosted infrastructure. The client provides written authorization for testing. Which additional step is MOST important before testing the cloud-hosted assets?

4. A penetration tester is scoping an engagement and the client wants to test all systems on the corporate network. Which element of the scoping process ensures the tester knows exactly which IP addresses and network ranges are authorized targets?

5. During an engagement kickoff meeting, the client states that testing must not disrupt production systems during business hours. This restriction should be documented in which section of the pre-engagement paperwork?