問題文
A tester plans to run a penetration test against a customer system next week and asks whether a written authorization is really necessary, since the work is already in the signed test plan. Which answer states the reasons correctly?
選択肢
- It is necessary, because access to a system is billable without a contract, the run may need an invoice, and the run may exceed a budget during the described engagement.
- It is necessary, because access to a system is unlawful without a waiver, the run may raise an alarm, and the run may cause a failure during the planned engagement.
- It is optional, because access to a system is granted without a request, the run may reuse an account, and the run may reveal a defect during the recorded engagement.
- It is optional, because access to a system is lawful without a waiver, the run may follow an outline, and the run may show a benefit during the given engagement.