Before we get started, let’s do a quick pre-test to see how familiar you are with what we’ll be discussing. You can find the answers and explanations at the bottom of the page—but try not to scroll down until you’ve finished!

Question 1

A business wants to ensure clients understand the scope of support they will receive, including response times and issue resolution expectations. Which document is typically used to outline these details?

• Service Level Agreement (SLA)
• Business Continuity Plan (BCP)
• Master Service Agreement (MSA)
• Vendor Risk Assessment (VRA)
• End User License Agreement (EULA)

Question 2

The Penetration Testing Execution Standard (PTES) consists of seven key phases. Which of the following are NOT part of PTES? (Select all that apply.)

• Security Documentation
• Vulnerability Analysis
• Threat Modeling
• Secure Software Development
• Risk Mitigation
• Post-Exploitation