CompTIA PenTest+ (PT0-002) — Question 245

Which of the following documents would be the most helpful in determining who is at fault for a temporary outage that occurred during a penetration test?

Answer options

• A. Non-disclosure agreement
• B. Business associate agreement
• C. Assessment scope and methodologies
• D. Executive summary

Correct answer: C

Explanation

The correct answer is C, as the assessment scope and methodologies outline the parameters and processes of the penetration test, helping to clarify responsibilities during the test. The other options, while important for various aspects of the engagement, do not provide specific details regarding the testing process or accountability for issues that arise during it.