CCOA: Certified Cybersecurity Operations AnalystDemo

By Isaca · Question Mode

QuestionQ6

Cybersecurity Principles and Risks

Before conducting a penetration test for a client, what is MOST critical to ensure?

  • A the timeframe has been determined.
  • B price has been estimated.
  • C scope is defined.
  • D authorized consent is obtained.
Explanation

Explicit authorized consent must be obtained before a penetration test begins, because testing systems without permission can constitute unauthorized access. Scope, timeframe, and pricing are important engagement terms, but they do not replace the client’s authorization.

Community Discussion

No comments yet. Be the first to start the discussion!