CompTIA PenTest+ Practice Test

In penetration testing, what should be documented to ensure that the testing does not target another organization’s wireless infrastructure?

1. IP addresses; firewall rules

2. Frequencies; devices used by the client

3. Network maps; DNS records

4. Access points; server configurations

The correct answer is: Frequencies; devices used by the client

Documenting frequencies and devices used by the client is essential in penetration testing to ensure that the testing is limited to the client’s wireless infrastructure and does not inadvertently target nearby or unrelated organizations' networks. Frequencies indicate the specific radio bands the client's devices operate on, while the devices themselves reveal which wireless access points should be tested. By having a clear understanding of the client's wireless configuration, testers can avoid picking up signals from nearby networks that could lead to unauthorized access or interference with unrelated networks. This level of documentation helps in defining the scope of the penetration test and providing a clear boundary that prevents unintentional disruptions or breaches of any external networks. Additionally, it enhances the integrity and professionalism of the penetration testing engagement, as it emphasizes that the tester is acting within the agreed parameters.