How should I use these Planning and Scoping practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Planning and Scoping questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Planning and Scoping domain.

PT0-002 · topic practice

Planning and Scoping practice questions

Practise CompTIA PenTest+ PT0-002 Planning and Scoping practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Planning and Scoping

Practice 10 questions Browse domain →

What the exam tests

What to know about Planning and Scoping

Planning and Scoping questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Planning and Scoping exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Planning and Scoping questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Planning and Scoping explanation →

A penetration tester is hired to assess the security of a company's internal network. The tester is given full network diagrams, credentials, and source code. Which type of penetration test is being performed?

Trap 1: Black box

Black box testing provides no prior knowledge to the tester.

Trap 2: Grey box

Grey box testing provides partial knowledge.

Trap 3: Red team

Red team is a type of engagement, not a knowledge level.

Study all Planning and Scoping common traps →

A
White box
White box testing provides full knowledge and credentials.
B
Black box
Why wrong: Black box testing provides no prior knowledge to the tester.
C
Grey box
Why wrong: Grey box testing provides partial knowledge.
D
Red team
Why wrong: Red team is a type of engagement, not a knowledge level.

Planning and Scoping practice questions

What to know about Planning and Scoping

Common Planning and Scoping exam traps

Planning and Scoping questions

A penetration tester is hired to assess the security of a company's internal network. The tester is given full network diagrams, credentials, and source code. Which type of penetration test is being performed?

During a pre-engagement meeting, the client states that no testing is allowed on the wireless network or on any cloud-based services hosted by third parties. Which part of the engagement documentation would specify these restrictions?

A penetration testing company is contracted to perform a social engineering engagement. The client requests that only employees in the finance department be targeted. Which scoping consideration is most relevant?

Which penetration testing standard provides a structured methodology for conducting penetration tests, including pre-engagement, reconnaissance, and reporting phases?

A company wants to simulate a real-world attack scenario where the penetration tester has no prior knowledge of the environment and must act as an external threat actor. However, the tester is allowed to use social engineering to gain initial access. Which type of engagement is most appropriate?

Which legal framework in the United States prohibits unauthorized access to computer systems and is commonly referenced in penetration testing authorization documents?

A penetration tester is preparing a deliverable for a client. Which of the following should be included in the final report?

A penetration tester is planning a test that involves scanning for vulnerabilities across a large IP range. The client has provided a list of IPs that are in-scope, but the tester notices that some IPs belong to a third-party company hosting a client application. What should the tester do?

A penetration tester is conducting a wireless penetration test. The client's rules of engagement state that testing must not disrupt production services. During the test, the tester's de-authentication attack causes the company's guest Wi-Fi to go offline. What should the tester do?

Which of the following is the primary purpose of a get-out-of-jail letter in a penetration testing engagement?

A penetration testing company is scoping a test for a client. The client wants to ensure that testing does not impact production systems. Which TWO of the following are appropriate scoping considerations? (Select TWO.)

A penetration tester is preparing a post-engagement deliverable. Which THREE of the following should be included in the final report? (Select THREE.)

Which TWO of the following are types of penetration testing based on the level of knowledge provided to the tester? (Select TWO.)

A penetration tester is hired to perform an assessment where the tester is provided with network diagrams, source code, and administrative credentials. Which type of penetration test is this?

Which document defines the IP ranges that are in scope, testing windows, and emergency stop criteria for a penetration test?

A penetration tester is planning a social engineering engagement targeting employees of a client. The client requests that only non-managerial staff be tested. Which scoping consideration is most directly affected by this request?

During a penetration test, the tester discovers evidence of an ongoing data breach that appears to involve criminal activity unrelated to the test scope. What is the tester's primary responsibility regarding this discovery?

A penetration tester is engaged to test a web application that uses a third-party payment gateway. The client has not obtained permission from the payment gateway provider. Which of the following is the best course of action?

Track your progress over time

Start a Planning and Scoping only practice session

Related PT0-002 topic practice pages

Information Gathering and Vulnerability Scanning practice questions

Planning and Scoping practice questions

Reporting and Communication practice questions

Attacks and Exploits practice questions

Tools and Code Analysis practice questions

PT0-002 fundamentals practice questions

PT0-002 scenario practice questions

PT0-002 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid