Worth 13% of the CompTIA PenTest+ (PT0-003) exam. CertClue has 41 questions on this objective.
Every legitimate penetration test rests on a stack of documents that establish legal authorization and technical boundaries before any testing begins. Confusing these documents with each other is a common exam trap.
Exam tip. If a question asks about a document governing the whole relationship versus one specific engagement, that is the MSA versus SOW distinction.
Free, with the answer and the reasoning. No account needed.
1. Anchorfield Bank has hired Ferro Point Security to perform a network penetration test. Before any technical work begins, both parties sign a document establishing the general terms of the business relationship, liability, confidentiality, and payment terms that will govern this and future engagements. What is this document called?
An MSA is the overarching contract that sets general legal and business terms for the relationship. A Statement of Work covers the specific scope of an individual engagement, Rules of Engagement govern how testing is conducted technically, and an NDA only addresses confidentiality of information, not the full business relationship.
The full CompTIA PenTest+ bank, the study notes behind these summaries, and a readiness score that tells you which objective to revise next. Free, no paid tier.
Take the free CompTIA PenTest+ practice test