CompTIA PenTest+ (PT0-003) — Question 201

A penetration testing company is defining the rules of engagement with a client. Which of the following should the company include?

Answer options

• A. Non-disclosure agreement
• B. Escalation process
• C. URL list
• D. Authorization letter

Correct answer: D

Explanation

The correct answer is D, as an authorization letter is essential for legal permission to conduct the penetration test. The other options, while important, do not provide the necessary legal backing that an authorization letter does, which protects both the tester and the client during the testing process.