thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Penetration Test Planning and Scoping

The first phase of a penetration test, defining objectives, targets, constraints, rules of engagement and legal authorization.

Definition

Planning establishes in-scope and out-of-scope assets, testing windows, testing types (black, gray, white box), communication and escalation paths, stop conditions, and compliance requirements, and obtains written permission. Poor scoping is a leading cause of failed or risky engagements.

Example

The SOW lists three production web apps in scope, excludes the payment processor's systems and limits testing to weekends.

Exam tip

Written authorization comes before any testing; third-party-hosted assets need the provider's permission too.

Related terms