thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Scope

The defined boundaries of an engagement: which assets, locations, techniques and time frames are included or excluded.

Definition

Scope lists in-scope IP ranges, domains, applications, users and physical sites, and explicitly names exclusions. Well-defined scope protects both client and tester legally and keeps the test focused on objectives. Anything discovered outside scope must not be tested without written amendment.

Example

In scope: 10.10.0.0/16 and app.example.com; out of scope: the production payment gateway and any DoS testing.

Exam tip

A frequent exam scenario is finding an interesting out-of-scope host; the right action is to stop and ask the client, not to test it.

Related terms