Question

Before performing any penetration test, through legal procedure, which key points listed below is not mandatory?

(a) Know the nature of the organization

(b) Characteristics of work done in the firm

(c) System and network

(d) Type of broadband company used by the firm

I have been asked this question in an online quiz.

My doubt stems from Ethics of Ethical Hacking in portion Security Ethics, Security Breach Scenarios & Corporate Security of Cyber Security

Answer 1

Right answer is (d) Type of broadband company used by the firm

For explanation I would say: Before performing any penetration test, through the legal procedure the key points that the penetration tester must keep in mind are –

i) Know the nature of the organization

ii) what type of work the organization do and

iii) the system and networks used in various departments and their confidential data that are sent and received over the network.