Question

Charleen is preparing to conduct a scheduled reconnaissance effort against a client site. Which of the following is not typically part of the rules of engagement that are agreed to with a client for a reconnaissance effort?

A. Timing
B. Scope
C. Exploitation methods
D. Authorization

Answer 1

Exploitation methods are not typically detailed in the rules of engagement for a reconnaissance effort; these rules usually mention Timing, Scope, and Authorization. Reconnaissance aims at information gathering, not exploiting vulnerabilities. Therefore, correct option is c.

Step-by-step explanation:

Charleen is preparing for a reconnaissance effort against a client site, and you've asked what is typically not part of the rules of engagement (ROE) that are agreed upon with a client for such an effort. The options given are Timing, Scope, Exploitation methods, and Authorization.

The rules of engagement for a reconnaissance effort, which is often part of a security audit or penetration testing, usually include specifics about the Timing, Scope, and Authorization. These elements are essential to ensure that the activities are legal and within the parameters agreed upon with the client.

However, Exploitation methods are not typically detailed in the rules of engagement for reconnaissance. During the reconnaissance phase, the goal is to gather information and identify potential vulnerabilities, not to exploit them.

Exploitation, if agreed upon, would come later in the process and be part of a different phase of engagement, often with its specific rules and limitations.