QuestionQ102Verified/Penetration Testing Scoping and Engagement MethodologyCopy linkReport a problemAsk AstroTutorSave questionWhat is the purpose of a Get-Out-of-Jail-Free card during a pen-testing engagement?AIt indemnifies the tester against any loss or damage that may result from the testingBIt details standards and penalties imposed by federal, state, or local governmentsCIt is a formal approval to start pen test engagementDIt gives an understanding of the limitations, constraints, liabilities, and indemnification considerationsShow AnswerAnswerExplanationA Get-Out-of-Jail-Free card is a written authorization from the organization that permits the tester to perform the approved penetration-testing activities. It establishes that the testing is sanctioned, distinguishing the authorized work from unauthorized access.Learn moreNIST SP 800-42: Guideline on Network Security TestingShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion