Question
Which of the following provides the details about the terms of a test with a third-party penetration tester?
- A. Rules of engagement Correct
- B. Supply chain analysis
- C. Right to audit clause
- D. Due diligence
Explanation
The rules of engagement define the terms of a penetration test: scope, targets, permitted techniques, timing, contacts and how findings are handled. A right-to-audit clause gives a customer the right to audit a vendor, supply chain analysis evaluates suppliers, and due diligence is the assessment of a party before entering an agreement.
