GIAC Penetration Tester (GPEN) — Question 1

What is the MOST important document to obtain before beginning any penetration testing?

Answer options

• A. Project plan
• B. Exceptions document
• C. Project contact list
• D. A written statement of permission

Correct answer: A

Explanation

The Project plan is essential as it outlines the scope and objectives of the penetration test, ensuring all parties are aligned. While the other documents may provide additional context or permissions, the project plan is foundational for guiding the entire testing process.