Comprehensive CompTIA PenTest+ practice exam featuring realistic penetration testing scenarios, exploitation techniques, reporting skills, and cybersecurity fundamentals. 1. You work at a penetration testing consulting firm. An organization that you have not worked with previously calls and asks you to perform a black box assessment of its network. You agree on a price and scope over the phone. After quickly designing the test on paper, you begin execution later that afternoon. Was this test conducted properly? A. Yes, proper penetration test planning and scoping procedures were followed. B. No, new clients should be properly vetted before beginning an assessment. C. No, a master service agreement (MSA) should be signed before testingbegins. D. No, the rules of engagement (ROE) for the test should be documentedand signed by both parties. 2. You are arranging the terms of a penetration test with a new client. Which of the following is an appropriate way to secure legal permission to conduct the test? A. Ask a member of senior management via email for permission to perform the test. B. Ask a member of the IT staff over the phone for permission to performthe test. C. Ask a member of the IT staff to sign a