A Client Has Requested an External Network Penetration Test for Compliance

question 64

Multiple Choice

A client has requested an external network penetration test for compliance purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to add the penetration tester's source IP addresses to the client's IPS whitelist for the duration of the test. Which of the following is the BEST argument as to why the penetration tester's source IP addresses should be whitelisted?

• A) Whitelisting prevents a possible inadvertent DoS attack against the IPS and supporting log-monitoring systems.
• B) Penetration testing of third-party IPS systems often requires additional documentation and authorizations; potentially delaying the time-sensitive test.
• C) IPS whitelisting rules require frequent updates to stay current, constantly developing vulnerabilities and newly discovered weaknesses.
• D) Testing should focus on the discovery of possible security issues across all in-scope systems, not on determining the relative effectiveness of active defenses such as an IPS.

---

Definitions:

Kant

Refers to Immanuel Kant, an 18th-century German philosopher who made pivotal contributions to the development of modern philosophy, especially in the areas of epistemology and ethics.

Universalizability

The ability to be applied to everyone without exception. This is an essential feature of moral principles, according to Immanuel Kant and others.

Ethical Relativist

A belief that morality is not universal and what is considered morally right or wrong varies from culture to culture.

Female Circumcision

A cultural and religious practice involving the partial or total removal of the external female genitalia, often debated for its health implications and ethical concerns.