What must be agreed in writing before any penetration test?
- A Scope and rules of engagement
- B The final report format
- C The tester's hourly rate only
- D The tools to be used
Answer
Scope and rules of engagement
Testing without written authorisation is a criminal offence regardless of intent, so scope and authorisation are non-negotiable.





