Pen Test Deliverables Quiz

What document states what is and isn't allowed to be talked about and how data is supposed to be handled?

• Test Plan

• Contract

• Notice of Engagement

• NDA

What should be included in the test report according to the text?

• Description of issues, your own score, CVSS score, test data used

• Only the test data used

• Only the CVSS score

• Only a description of the issues

Who should create the test contract according to the text?

• The customer

• The security expert

• The developer

• A lawyer

What is the purpose of the debriefing PowerPoint according to the text?

• To explain the test plan

• To summarize the issues found

• To create a contract

• To inform about the NDA

What is the purpose of the notice of engagement according to the text?

• To sign the NDA

• To create a test plan

• To explain the test data used

• To inform the customer about the test start

What should be signed off on before starting the test according to the text?

• Test plan

• Notice of engagement

• Debriefing PowerPoint

• Test report

What is the importance of protecting the customer's data according to the text?

• To convince the customer to start the test

• To ensure the security expert is covered

• To prevent leaks of methodologies

• To avoid attacks during the test

What should be adapted to the customer's needs according to the text?

• Test data used

• Test plan templates

• CVSS score

• Debriefing PowerPoint content

What should be included in the NDA according to the text?

• CVSS score

• Description of issues

• Test data used

• Handling of data, what is and isn't allowed to be talked about

Who should sign the test contract according to the text?

• The developer

• The customer

• The security expert

• The lawyer