Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CISSP Exam - Topic 1 Question 72 Discussion

Posted by Helene on Jul 08, 2023 at 10:30 AM

Which of the following is the FIRST step of a penetration test plan?

Suggested Answer: D

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
40 comments · newest first
JU
Judy 11 months ago
Wait, is notifying customers really an option? That seems odd.
AN
Andra 11 months ago
C makes the most sense, but I’m surprised it’s not more obvious.
YO
Yoko 11 months ago
No way, it's A! You can't analyze without a diagram.
MA
Matthew 11 months ago
I thought it was D, timing is crucial too.
BA
Barney 12 months ago
It's definitely C, you need management approval first!
NO
Noble 12 months ago
Scheduling the test seems important, but I think it comes after getting approval. I’d go with option C for the first step.
GA
Gabriele 12 months ago
I practiced a similar question, and I feel like notifying customers is not the first step. It seems more like a later consideration.
CE
Celia 1 year ago
I'm not so sure about that. I remember something about analyzing the network diagram first, but maybe that comes later?
RA
Rashida 1 year ago
I think the first step is definitely getting management approval. Without that, the whole test could be a problem, right?
LO
Louisa 1 year ago
Okay, I've got this. The original subscription was $600 per unit for 10 units over 24 months. After 10 months, they want to issue a prorated refund and quote a new, more expensive subscription. The question is asking for the expected net total of the amended subscription. I'll need to do some calculations, but I think I can figure this out.
RO
Roy 1 year ago
I've used the Demisto War Room CLI before, and I'm pretty sure the correct answer is B, /invite Bob. That's the standard command for inviting a user to join an investigation.
AD
Adolph 1 year ago
Okay, I've got this. The change log is the input that's used to document changes during the Manage Stakeholder Engagement process. Remembering the different inputs and outputs is key for these types of questions.
AV
Avery 1 year ago
Hold up, is this a trick question? The FIRST step is always making sure you have the right snacks for the long haul.
LI
Ligia 1 year ago
↳ replying to Avery
C) Obtaining the approval of the company's management
LY
Lyla 1 year ago
↳ replying to Avery
B) Notifying the company's customers
CA
Caprice 1 year ago
↳ replying to Avery
A) Analyzing a network diagram of the target network
BR
Brock 1 year ago
Scheduling during low impact? Nah, real pentesters do it during the busiest time. More drama that way!
PA
Patria 1 year ago
↳ replying to Brock
D) Scheduling the penetration test during a period of least impact
RA
Rasheeda 1 year ago
↳ replying to Brock
C) Obtaining the approval of the company's management
DE
Desiree 1 year ago
↳ replying to Brock
A) Analyzing a network diagram of the target network
HE
Heike 1 year ago
Notifying customers? That's just asking for trouble. Better keep this one under wraps until I'm done.
JU
Justine 1 year ago
↳ replying to Heike
D) Scheduling the penetration test during a period of least impact
AL
Alpha 1 year ago
↳ replying to Heike
C) Obtaining the approval of the company's management
FL
Florencia 1 year ago
↳ replying to Heike
A) Analyzing a network diagram of the target network
BL
Blair 1 year ago
↳ replying to Heike
D) Scheduling the penetration test during a period of least impact
FI
Filiberto 1 year ago
↳ replying to Heike
C) Obtaining the approval of the company's management
TR
Truman 1 year ago
↳ replying to Heike
C) Obtaining the approval of the company's management
PA
Page 1 year ago
↳ replying to Heike
A) Analyzing a network diagram of the target network
AL
Alyssa 1 year ago
↳ replying to Heike
A) Analyzing a network diagram of the target network
KA
Karan 1 year ago
D) Scheduling the penetration test during a period of least impact
CH
Chi 1 year ago
Analyzing the network diagram? That's way too advanced for the first step. You gotta get the basics covered first.
MI
Mireya 1 year ago
A) Analyzing a network diagram of the target network
KI
Kimberlie 2 years ago
C) Obtaining the approval of the company's management
LA
Larae 2 years ago
But without management approval, we can't proceed with the test. It's crucial to have their support.
EL
Elinore 2 years ago
Hmm, I think the first step is definitely obtaining management approval. Can't start hacking without the green light!
RE
Refugia 1 year ago
↳ replying to Elinore
D) Scheduling the penetration test during a period of least impact
FI
Filiberto 1 year ago
↳ replying to Elinore
C) Obtaining the approval of the company's management
ER
Erinn 1 year ago
↳ replying to Elinore
A) Analyzing a network diagram of the target network
JA
Jaime 2 years ago
I disagree, I believe the first step is analyzing a network diagram of the target network.
LA
Larae 2 years ago
I think the first step is obtaining the approval of the company's management.
0/2000 characters

Save Cancel