MENU
Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.
Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?
Suggested Answer: A
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
ME
Merissa
6 months ago
Right! ROE should focus on the test parameters, not employees.
VA
Vallie
7 months ago
I feel like A is just extra info. Not part of ROE.
CL
Clarence
7 months ago
A is definitely not needed. Just focus on the test itself.
CH
Charlesetta
7 months ago
B, C, and D are all crucial for testing.
CA
Cassi
7 months ago
Agreed, A makes no sense for ROE.
HE
Herman
7 months ago
I think A is the answer. Employee lists aren't relevant.
LE
Leila
7 months ago
I’m skeptical about this; seems like it could vary by organization.
BE
Beatriz
8 months ago
Definitely not A, that’s just unnecessary info.
NO
Nohemi
8 months ago
Wait, are you sure? I thought employee info might be relevant.
MA
Marva
8 months ago
Totally agree, it’s more about the testing methods and scope.
LO
Lorrine
9 months ago
A list of employees isn't usually part of ROE.
AR
Arlene
9 months ago
I'm with Sarah on this one. A list of employees? That's just unnecessary information for a pen-test.
JO
Joana
9 months ago
C'mon, this is too easy. The answer is clearly A. Who needs a list of employees for a pen-test?
KA
Kara
9 months ago
Haha, I bet the person who came up with that option was just trying to trick us. Nice try, but I'm not falling for it!
TA
Tayna
9 months ago
Hmm, I'd say the correct answer is A. Why would we need a list of employees for a pen-test?
HI
Hillary
9 months ago
Specific IP addresses are definitely part of the ROE, but I don't think a list of employees would be relevant at all.
AL
Alyce
10 months ago
I feel like points of contact are important for communication during the test, but I can't quite remember if they are considered in the ROE scope.
FE
Felicitas
10 months ago
I think we practiced a question similar to this, and I recall that acceptable testing techniques are definitely included in the ROE scope.
JE
Jesusa
10 months ago
I've seen questions like this before. The key is to focus on the specific factors mentioned in the ROE, and then pick the one that doesn't fit.
BE
Bette
10 months ago
A list of employees? That doesn't seem relevant to the technical scope of the test. I'm going to go with that as the answer.
SA
Salena
10 months ago
I remember discussing how the ROE outlines the boundaries for testing, but I'm not sure if employee lists are really part of that.
TA
Tawna
10 months ago
Okay, let's think this through. The ROE covers the scope and limits of the pen-test, so I need to identify the factor that wouldn't be part of that.
KA
Karl
11 months ago
A list of employees in the client organization? Really? That's a bit too much, don't you think?
CH
Chi
11 months ago
I'm a bit confused by the wording here. Is the question asking about what's NOT considered in the ROE, or what is considered? I need to read this carefully.
JU
Julio
11 months ago
Hmm, this seems straightforward. I'll focus on the key factors mentioned in the question and eliminate the ones that don't fit.
LO
Lovetta
6 months ago
Right! A is more about the organization, not the test.
VE
Veronika
6 months ago
B, C, and D are all essential for ROE.
BE
Ben
6 months ago
Agreed, A doesn't fit the testing scope.
CA
Carrol
6 months ago
I think A is the odd one out.
FL
Flo
11 months ago
Good catch! A is definitely not a factor.