"CompTIA PenTest+ Practice Test - SimeonOnSecurity"

Question 1

"Which term or concept best matches this description: \"a document that defines scope, timing, and limits of a test\"?"

Accepted Answer

"Rules of engagement is best described as a document that defines scope, timing, and limits of a test. This concept falls under the Engagement Management domain."

Question 2

"Within the Engagement Management domain, what best describes Rules of engagement?"

Accepted Answer

"Rules of engagement is correctly described as a document that defines scope, timing, and limits of a test."

Question 3

"As a penetration tester, you encounter something described as \"a document that defines scope, timing, and limits of a test\". Which term applies?"

Accepted Answer

"Rules of engagement is best described as a document that defines scope, timing, and limits of a test, so it is the correct match here."

Question 4

"Which term or concept best matches this description: \"the defined boundaries and targets of a test\"?"

Accepted Answer

"Scope is best described as the defined boundaries and targets of a test. This concept falls under the Engagement Management domain."

Question 5

"Within the Engagement Management domain, what best describes Scope?"

Accepted Answer

"Scope is correctly described as the defined boundaries and targets of a test."

Question 6

"As a penetration tester, you encounter something described as \"the defined boundaries and targets of a test\". Which term applies?"

Accepted Answer

"Scope is best described as the defined boundaries and targets of a test, so it is the correct match here."

Question 7

"Which term or concept best matches this description: \"an agreement that protects confidential information\"?"

Accepted Answer

"NDA is best described as an agreement that protects confidential information. This concept falls under the Engagement Management domain."

Question 8

"Within the Engagement Management domain, what best describes NDA?"

Accepted Answer

"NDA is correctly described as an agreement that protects confidential information."

Question 9

"As a penetration tester, you encounter something described as \"an agreement that protects confidential information\". Which term applies?"

Accepted Answer

"NDA is best described as an agreement that protects confidential information, so it is the correct match here."

Question 10

"Which term or concept best matches this description: \"a master agreement that sets overall terms\"?"

Accepted Answer

"MSA is best described as a master agreement that sets overall terms. This concept falls under the Engagement Management domain."

Question 11

"Within the Engagement Management domain, what best describes MSA?"

Accepted Answer

"MSA is correctly described as a master agreement that sets overall terms."

Question 12

"As a penetration tester, you encounter something described as \"a master agreement that sets overall terms\". Which term applies?"

Accepted Answer

"MSA is best described as a master agreement that sets overall terms, so it is the correct match here."

Question 13

"Which term or concept best matches this description: \"a statement that defines the work and deliverables\"?"

Accepted Answer

"SoW is best described as a statement that defines the work and deliverables. This concept falls under the Engagement Management domain."

Question 14

"Within the Engagement Management domain, what best describes SoW?"

Accepted Answer

"SoW is correctly described as a statement that defines the work and deliverables."

Question 15

"As a penetration tester, you encounter something described as \"a statement that defines the work and deliverables\". Which term applies?"

Accepted Answer

"SoW is best described as a statement that defines the work and deliverables, so it is the correct match here."

Question 16

"Which term or concept best matches this description: \"the terms that govern acceptable use of a service\"?"

Accepted Answer

"ToS is best described as the terms that govern acceptable use of a service. This concept falls under the Engagement Management domain."

Question 17

"Within the Engagement Management domain, what best describes ToS?"

Accepted Answer

"ToS is correctly described as the terms that govern acceptable use of a service."

Question 18

"As a penetration tester, you encounter something described as \"the terms that govern acceptable use of a service\". Which term applies?"

Accepted Answer

"ToS is best described as the terms that govern acceptable use of a service, so it is the correct match here."

Question 19

"Which term or concept best matches this description: \"written permission that allows testing\"?"

Accepted Answer

"Authorization letter is best described as written permission that allows testing. This concept falls under the Engagement Management domain."

Question 20

"Within the Engagement Management domain, what best describes Authorization letter?"

Accepted Answer

"Authorization letter is correctly described as written permission that allows testing."

Question 21

"As a penetration tester, you encounter something described as \"written permission that allows testing\". Which term applies?"

Accepted Answer

"Authorization letter is best described as written permission that allows testing, so it is the correct match here."

Question 22

"Which term or concept best matches this description: \"the division of security duties among parties\"?"

Accepted Answer

"Shared responsibility is best described as the division of security duties among parties. This concept falls under the Engagement Management domain."

Question 23

"Within the Engagement Management domain, what best describes Shared responsibility?"

Accepted Answer

"Shared responsibility is correctly described as the division of security duties among parties."

Question 24

"As a penetration tester, you encounter something described as \"the division of security duties among parties\". Which term applies?"

Accepted Answer

"Shared responsibility is best described as the division of security duties among parties, so it is the correct match here."

Question 25

"Which term or concept best matches this description: \"an open methodology and metrics for security testing\"?"

Accepted Answer

"OSSTMM is best described as an open methodology and metrics for security testing. This concept falls under the Engagement Management domain."