Eccouncil Exam ECSAv10 Topic 6 Question 53 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 53
Topic #: 6

Why is a legal agreement important to have before launching a penetration test?

AGuarantees your consultant fees

BAllows you to perform a penetration test without the knowledge and consent of the organization's upper management

CIt establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.

DIt is important to ensure that the target organization has implemented mandatory security policies

Show Suggested Answer

Suggested Answer: D

by Carmela at Feb 25, 2023, 02:14 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lynna

2 months ago

You know, I heard about this guy who thought he could just waltz in and hack a company without permission. Let's just say, he's now serving a nice long prison sentence. Stick with C, folks.

upvoted 0 times

Jospeh

6 days ago

Detra: It's all about establishing the legality and consent before diving in.

upvoted 0 times

...

Detra

12 days ago

User 2: Agreed, having a legal agreement in place is crucial for a penetration test.

upvoted 0 times

...

Junita

19 days ago

User 1: Yeah, that guy was reckless. C is definitely the way to go.

upvoted 0 times

...

Herminia

2 months ago

D? Really? Mandatory security policies have nothing to do with the legality of the pen test. Come on, guys, C is the obvious choice here.

upvoted 0 times

Roselle

4 days ago

Yeah, C is definitely the right choice to ensure everything is legal and documented.

upvoted 0 times

...

Remona

1 months ago

But C establishes the legality of the penetration test and gets consent from the company.

upvoted 0 times

...

Daniela

1 months ago

But C establishes the legality of the penetration test and gets consent from the company.

upvoted 0 times

...

Troy

1 months ago

I think D is important to make sure the organization is secure.

upvoted 0 times

...

Lezlie

1 months ago

I think D is important to make sure the organization is secure.

upvoted 0 times

...

Jeff

2 months ago

Hah, B? That's a good way to get yourself in legal hot water. No way I'm doing a pen test without the company's full knowledge and consent. C is the way to go.

upvoted 0 times

...

Serina

2 months ago

I agree with C. The agreement documents the consent and scope, making the test legal. Conducting a pen test without the organization's knowledge is just asking for trouble.

upvoted 0 times

Ramonita

1 months ago

User 2: Definitely, it's important to have consent and scope outlined.

upvoted 0 times

...

Eva

1 months ago

User 1: I agree, having a legal agreement ensures everything is documented.

upvoted 0 times

...

Lilli

2 months ago

But wouldn't it also be important to make sure the target organization has proper security policies in place to protect their data during the test?

upvoted 0 times

...

Vernice

2 months ago

I agree with Tamesha, having a legal agreement ensures that the penetration test is conducted in a legal and ethical manner.

upvoted 0 times

...

Tamesha

2 months ago

C) It establishes the legality of the penetration test by documenting the scope of the project and the consent of the company.

upvoted 0 times

...

Lera

2 months ago

A legal agreement is crucial to ensure the penetration test is authorized and conducted ethically. It's not about the consultant's fees, but rather protecting both parties involved.

upvoted 0 times