Eccouncil ECSAv10 Exam - Topic 1 Question 99 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 99
Topic #: 1

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

AA list of employees in the client organization

BA list of acceptable testing techniques

CSpecific IP addresses/ranges to be tested

DPoints of contact for the penetration testing team

Show Suggested Answer

Suggested Answer: A

by Tamekia at Nov 22, 2025, 01:57 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Merissa

26 days ago

Right! ROE should focus on the test parameters, not employees.

upvoted 0 times

...

Vallie

1 month ago

I feel like A is just extra info. Not part of ROE.

upvoted 0 times

...

Clarence

1 month ago

A is definitely not needed. Just focus on the test itself.

upvoted 0 times

...

Charlesetta

1 month ago

B, C, and D are all crucial for testing.

upvoted 0 times

...

Cassi

2 months ago

Agreed, A makes no sense for ROE.

upvoted 0 times

...

Herman

2 months ago

I think A is the answer. Employee lists aren't relevant.

upvoted 0 times

...

Leila

2 months ago

I’m skeptical about this; seems like it could vary by organization.

upvoted 0 times

...

Beatriz

3 months ago

Definitely not A, that’s just unnecessary info.

upvoted 0 times

...

Nohemi

3 months ago

Wait, are you sure? I thought employee info might be relevant.

upvoted 0 times

...

Marva

3 months ago

Totally agree, it’s more about the testing methods and scope.

upvoted 0 times

...

Lorrine

3 months ago

A list of employees isn't usually part of ROE.

upvoted 0 times

...

Arlene

3 months ago

I'm with Sarah on this one. A list of employees? That's just unnecessary information for a pen-test.

upvoted 0 times

...

Joana

3 months ago

C'mon, this is too easy. The answer is clearly A. Who needs a list of employees for a pen-test?

upvoted 0 times

...

Kara

4 months ago

Haha, I bet the person who came up with that option was just trying to trick us. Nice try, but I'm not falling for it!

upvoted 0 times

...

Tayna

4 months ago

Hmm, I'd say the correct answer is A. Why would we need a list of employees for a pen-test?

upvoted 0 times

...

Hillary

4 months ago

Specific IP addresses are definitely part of the ROE, but I don't think a list of employees would be relevant at all.

upvoted 0 times

...

Alyce

4 months ago

I feel like points of contact are important for communication during the test, but I can't quite remember if they are considered in the ROE scope.

upvoted 0 times

...

Felicitas

4 months ago

I think we practiced a question similar to this, and I recall that acceptable testing techniques are definitely included in the ROE scope.

upvoted 0 times

...

Jesusa

4 months ago

I've seen questions like this before. The key is to focus on the specific factors mentioned in the ROE, and then pick the one that doesn't fit.

upvoted 0 times

...

Bette

5 months ago

A list of employees? That doesn't seem relevant to the technical scope of the test. I'm going to go with that as the answer.

upvoted 0 times

...

Salena

5 months ago

I remember discussing how the ROE outlines the boundaries for testing, but I'm not sure if employee lists are really part of that.

upvoted 0 times

...

Tawna

5 months ago

Okay, let's think this through. The ROE covers the scope and limits of the pen-test, so I need to identify the factor that wouldn't be part of that.

upvoted 0 times

...

Karl

5 months ago

A list of employees in the client organization? Really? That's a bit too much, don't you think?

upvoted 0 times

...

Chi

6 months ago

I'm a bit confused by the wording here. Is the question asking about what's NOT considered in the ROE, or what is considered? I need to read this carefully.

upvoted 0 times

...