The three PRIMARY requirements for a penetration test are

A.
A defined goal, limited time period, and approval of management

B.
A general objective, unlimited time, and approval of the network administrator

C.
An objective statement, disclosed methodology, and fixed cost

D.
A stated objective, liability waiver, and disclosed methodology