PT0-002 Engagement Management Practice Question
During the pre-engagement phase, a penetration tester and the client agree on the specific IP ranges to be tested, testing windows, and what constitutes an emergency stop condition. Which document typically contains these details?
⚠ Common exam trap
Candidates often confuse the SOW with the RoE. While the SOW covers high-level deliverables and objectives, the RoE specifies the precise operational details, such as the IP ranges to test, testing windows, and emergency stop conditions, as described in this question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rules of Engagement (RoE)
The Rules of Engagement (RoE) document is specifically designed to define the scope, authorization, and constraints of a penetration test, including target IP ranges, testing windows, and emergency stop conditions. This ensures both the tester and client have a clear, legally binding agreement on how the test will be conducted, preventing misunderstandings or unauthorized actions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Non-Disclosure Agreement (NDA)
Why it's wrong here
NDA covers confidentiality, not operational rules.
- ✗
Get-out-of-jail letter
Why it's wrong here
A get-out-of-jail letter authorises the tester to perform the engagement and protects them from legal action, but it does not record scoping specifics such as IP ranges, testing windows or emergency stop conditions. Those belong in the rules of engagement; the authorisation letter is tempting because both are signed pre-engagement documents.
- ✓
Rules of Engagement (RoE)
Why this is correct
The Rules of Engagement document records the agreed scope, IP ranges, testing windows and emergency stop conditions between tester and client. It satisfies the pre-engagement requirement by formalising these authorisation and boundary details before testing begins, distinct from the statement of work or NDA.
- ✗
Statement of Work (SOW)
Why it's wrong here
The SOW covers deliverables, pricing and timeline, but scoping specifics such as target IP ranges, test windows and stop conditions belong in the Rules of Engagement. It tempts because the SOW is the master contractual document signed before work begins, so it is correct when you need to define commercial terms and acceptance criteria.
Go deeper
Related to this question
Learn chapter
Python for Penetration Testing
Key term
Authorization
Authorization determines what an authenticated user is allowed to do within a system, such as accessing files, running programs, or changing settings.
Key term
Rules of engagement
Rules of engagement are the documented guidelines that define the scope, boundaries, and authorized actions a security tester may take during a penetration test or security assessment.
About these practice questions
Courseiva writes every PT0-003 question from scratch — 777 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.