PT0-002 Domain 1: Planning and Scoping

Two designs were proposed. Design A would obtain written authorization. Design B would define out-of-scope assets. The team must pick the approach aligned with vendor best practices. Which choice is correct?

Multiple choice — select one answer

Answer choices

  1. a. Explicit exclusions in RoE
  2. b. Written scope, RoE, and emergency contacts
  3. c. Signed scope before active testing
  4. d. Test any IP (not recommended for production workloads)

Architectural breakdown & explanation

Authorization prevents legal issues. Compare with Explicit exclusions in RoE: Scope prevents collateral impact.

Correct answer(s): c. Signed scope before active testing

Exam domain: Domain 1: Planning and Scoping (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the CompTIA PenTest+ bank. Run a full timed practice exam with domain-weighted random questions in your browser.