Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides toplevel guidance for conducting the penetration testing.
Various factors are considered while preparing the scope of ROE which clearly explain the
limits associated with the security test.
Which of the following factors is NOT considered while preparing the scope of the Rules of
Engagment (ROE)?
A.
A list of employees in the client organization
B.
A list of acceptable testing techniques
C.
Specific IP addresses/ranges to be tested
D.
Points of contact for the penetration testing team