CRT Practice Questions - CREST Registered Penetration Tester (CRT) Exam

A client asks you to test a system owned by a third-party cloud provider. What is the CORRECT first action?

Start scanning — the client owns the data Obtain written authorisation from the cloud provider per their pentest policy Refuse the engagement outright Use stealth techniques so the provider does not notice

Correct Answer:

Obtain written authorisation from the cloud provider per their pentest policy

Access more questions from this quiz

Continue to CRT Practice Questions - CREST Registered Penetration Tester (CRT) Exam for more practice questions and the full quiz experience.

Access More Questions