CompTIA PenTest+ (PT0-001) — Question 93

A client asks a penetration tester to add more addresses to a test currently in progress. Which of the following would define the target list?

Answer options

• A. Rules of engagement
• B. Mater services agreement
• C. Statement of work
• D. End-user license agreement

Correct answer: C

Explanation

The correct answer is C, as the Statement of Work (SOW) outlines the specific tasks and deliverables for a project, including the target list for penetration testing. The other options do not specifically define the target list: A refers to guidelines for conduct, B to a broad agreement for services, and D to software usage terms.