CompTIA PenTest+ (PT0-002) — Question 25

A penetration tester received a 16-bit network block that was scoped for an assessment. During the assessment, the tester realized no hosts were active in the provided block of IPs and reported this to the company. The company then provided an updated block of IPs to the tester. Which of the following would be the most appropriate NEXT step?

Answer options

• A. Terminate the contract.
• B. Update the ROE with new signatures.
• C. Scan the 8-bit block to map additional missed hosts.
• D. Continue the assessment.

Correct answer: B

Explanation

The correct step is to update the ROE with new signatures, as this ensures that the testing parameters are aligned with the newly provided IP range. Terminating the contract (A) is unnecessary when a new range is provided. Scanning the 8-bit block (C) may not be relevant if the new block is already provided, and continuing the assessment (D) without updating the ROE would not adhere to the agreed-upon scope.