CompTIA PenTest+ (PT1-002) — Question 90

When preparing for an engagement with an enterprise organization, which of the following is one of the MOST important items to develop fully prior to beginning the penetration testing activities?

Answer options

• A. Clarify the statement of work.
• B. Obtain an asset inventory from the client.
• C. Interview all stakeholders.
• D. Identify all third parties involved.

Correct answer: A

Explanation

Clarifying the statement of work is crucial as it outlines the scope, objectives, and limitations of the penetration testing engagement, ensuring all parties have aligned expectations. While obtaining an asset inventory, interviewing stakeholders, and identifying third parties are important, they are secondary to having a clear and agreed-upon statement of work that governs the engagement.