Which of the following should be done FIRST when planning a penetration test?

exams CISA V0 CISA exam 0 Comments

Which of the following should be done FIRST when planning a penetration test?
A . Execute nondisclosure agreements (NDAs).
B. Determine reporting requirements for vulnerabilities.
C. Define the testing scope.
D. Obtain management consent for the testing.

Answer: D