Question

During a kickoff call, a client's IT manager verbally provides a list of IP ranges and web application URLs that are in scope for an upcoming external penetration test. The engagement is scheduled to begin in two days. Which action should the lead tester take BEFORE any active testing to ensure the scope is properly authorized and defensible?

Accepted Answer

Obtain a documented, signed scope definition and authorization that explicitly lists the approved IP ranges and URLs

Answer

Begin testing the provided ranges immediately since the IT manager confirmed them during the kickoff call

Answer

Run a broad discovery scan across the client's entire public ASN to identify any additional assets that might belong in scope

Answer

Email the IT manager asking them to forward the ranges to the tester's personal mailbox for record keeping