9h • 🙋♂️ CISSP
CISSP Practice Question (Domain 6: Security Assessment and Testing)
A SaaS firm's largest customer requires an independent penetration test before renewing in 30 days. The CTO wants the in-house red team to do it, and sales wants only the customer portal tested. What should the security manager do FIRST?
A. Have the in-house red team test now to hit the deadline
B. Agree scope and independence criteria with the customer
C. Hire an external firm to test only the customer portal
D. Run a vulnerability scan before any penetration test
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
0
6 comments
CISSP Practice Question (Domain 6: Security Assessment and Testing)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+40
2
+35
3
+28
4
+27
5
+21
Powered by