Eccouncil ECSAv10 Exam - Topic 1 Question 99 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 99
Topic #: 1

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing. Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.

Which of the following factors is NOT considered while preparing the scope of the Rules of Engagment (ROE)?

AA list of employees in the client organization

BA list of acceptable testing techniques

CSpecific IP addresses/ranges to be tested

DPoints of contact for the penetration testing team

Show Suggested Answer

Suggested Answer: A

by Tamekia at Nov 22, 2025, 01:57 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Beatriz

3 days ago

Definitely not A, that’s just unnecessary info.

upvoted 0 times

...

Nohemi

8 days ago

Wait, are you sure? I thought employee info might be relevant.

upvoted 0 times

...

Marva

13 days ago

Totally agree, it’s more about the testing methods and scope.

upvoted 0 times

...

Lorrine

18 days ago

A list of employees isn't usually part of ROE.

upvoted 0 times

...

Arlene

24 days ago

I'm with Sarah on this one. A list of employees? That's just unnecessary information for a pen-test.

upvoted 0 times

...

Joana

29 days ago

C'mon, this is too easy. The answer is clearly A. Who needs a list of employees for a pen-test?

upvoted 0 times

...

Kara

1 month ago

Haha, I bet the person who came up with that option was just trying to trick us. Nice try, but I'm not falling for it!

upvoted 0 times

...

Tayna

1 month ago

Hmm, I'd say the correct answer is A. Why would we need a list of employees for a pen-test?

upvoted 0 times

...

Hillary

1 month ago

Specific IP addresses are definitely part of the ROE, but I don't think a list of employees would be relevant at all.

upvoted 0 times

...

Alyce

2 months ago

I feel like points of contact are important for communication during the test, but I can't quite remember if they are considered in the ROE scope.

upvoted 0 times

...

Felicitas

2 months ago

I think we practiced a question similar to this, and I recall that acceptable testing techniques are definitely included in the ROE scope.

upvoted 0 times

...

Jesusa

2 months ago

I've seen questions like this before. The key is to focus on the specific factors mentioned in the ROE, and then pick the one that doesn't fit.

upvoted 0 times

...

Bette

2 months ago

A list of employees? That doesn't seem relevant to the technical scope of the test. I'm going to go with that as the answer.

upvoted 0 times

...

Salena

2 months ago

I remember discussing how the ROE outlines the boundaries for testing, but I'm not sure if employee lists are really part of that.

upvoted 0 times

...

Tawna

3 months ago

Okay, let's think this through. The ROE covers the scope and limits of the pen-test, so I need to identify the factor that wouldn't be part of that.

upvoted 0 times

...

Karl

3 months ago

A list of employees in the client organization? Really? That's a bit too much, don't you think?

upvoted 0 times

...

Chi

3 months ago

I'm a bit confused by the wording here. Is the question asking about what's NOT considered in the ROE, or what is considered? I need to read this carefully.

upvoted 0 times

...

Julio

3 months ago

Hmm, this seems straightforward. I'll focus on the key factors mentioned in the question and eliminate the ones that don't fit.

upvoted 0 times

Flo

3 months ago

Good catch! A is definitely not a factor.

upvoted 0 times

...