CompTIA PenTest+ (PT0-003) — Question 143

A penetration tester is developing the rules of engagement for a potential client. Which of the following would most likely be specified in the rules of engagement?

Answer options

• A. Testing window
• B. Terms of service
• C. Authorization letter
• D. Shared responsibilities

Correct answer: A

Explanation

The testing window is crucial as it defines the timeframe during which the penetration testing can occur, helping to avoid conflicts with regular business operations. While terms of service, an authorization letter, and shared responsibilities are important documents, they do not specifically address the timing and conditions under which testing will take place.