CompTIA PenTest+ (PT0-002) — Question 195

Which of the following documents is agreed upon by all parties associated with the penetration-testing engagement and defines the scope, contacts, costs, duration, and deliverables?

Answer options

• A. SOW
• B. SLA
• C. MSA
• D. NDA

Correct answer: A

Explanation

The Statement of Work (SOW) is the document that clearly outlines all aspects of the engagement, including scope and deliverables, which is why it is the correct answer. The Service Level Agreement (SLA) pertains to service level expectations, the Master Service Agreement (MSA) outlines general terms for ongoing services, and the Non-Disclosure Agreement (NDA) focuses on confidentiality, none of which cover the specific details of the engagement like the SOW does.