Exam PT1-002 topic 1 question 1 discussion

Actual exam question from CompTIA's PT1-002

Question #: 1
Topic #: 1

A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity. Which of the following is the MOST important action to take before starting this type of assessment?

A. Ensure the client has signed the SOW.
B. Verify the client has granted network access to the hot site.
C. Determine if the failover environment relies on resources not owned by the client.
D. Establish communication and escalation procedures with the client.

Show Suggested Answer

Suggested Answer: A 🗳️

by Random_Leaf_Ninja127 at Nov. 15, 2021, 6:41 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 3 years ago

Selected Answer: A

A SOW should be signed before ANYTHING is done.

upvoted 5 times

shakevia463

2 years, 11 months ago

Hey did you take the test? How many questions did you see? Can anyone report back soon here or on the main pt1-002 page?

upvoted 1 times

...

[Removed]

Highly Voted 3 years, 5 months ago

It's A...who the hell approves these answers

upvoted 5 times

...

itcertific2020

Most Recent 1 year, 3 months ago

Hello Here , anyone can tell the difference between PT1-002 and PT0-002

upvoted 1 times

...

Caoilfhion

1 year, 6 months ago

Selected Answer: C

It's C because a SOW means nothing if you didn't account for systems that weren't included in being given permission to Pentest. Checking to make sure the ENTIRE network is owned by the client first, ensures 1.) You're not getting slammed with legal regulations by not having permission on those systems...you might need multiple SOWs! and 2.) You're not stuck during the Pentest because you ran into a system you didn't account for, and legally cannot continue....(even though this is moot to real bad actors, this test about "hacking for good".)

upvoted 1 times

...

JimBobSquare101

3 years ago

Having the S+, CySA and CASP, I would go with A on this...

upvoted 4 times

...

Cyber_Judy

3 years ago

Selected Answer: C

Albeit a statement of work (SOW) is one of the first and primary requirements when conducting a penetration test, however it would include scope and what is included. Whether the organization owns said networks and subnetworks.

upvoted 1 times

...