Question

During what phase of penetration test should the testers obtain written authorization to conduct the test?

A. Planning
B. Attack
C. Discovery
D. Reporting

Answer 1

Written authorization for penetration testing should be obtained during the Planning phase to ensure the legality and approval of the test. This preemptive step is critical for testers to avoid potential legal repercussions.

Step-by-step explanation:

The phase of a penetration test during which the testers should obtain written authorization to conduct the test is the Planning phase (Option A). It is crucial to get this authorization before any further steps are taken to ensure that the test is legal and approved by the organization's management. Without written authorization, the testers could face legal issues, as they would be accessing systems and data without explicit permission.This step is important to ensure that the testers have the necessary permission to assess the security of the target system or network.