Which step would you perform first to ensure the engagement follows the PTES methodology?

Which step would you perform first to ensure the engagement follows the PTES methodology?

• A. Reconnaissance
• B. Scoping and rules of engagement
• C. Pre-engagement interactions
• D. Information gathering

Answer: (C)

Pre-engagement interactions are the starting point because PTES emphasizes obtaining formal authorization and aligning expectations before any technical work. This step establishes written permission, defines who is involved, sets the scope at a high level, and arranges communication and handling of sensitive data. With that groundwork in place, you can move into the actual work of the engagement safely and legally. Once you have that authorization, you would typically address scoping and rules of engagement, then proceed to information gathering and other technical phases. Without the initial pre-engagement, attempting reconnaissance or data collection could violate legal and ethical boundaries and derail the engagement.

Pre-engagement interactions are the starting point because PTES emphasizes obtaining formal authorization and aligning expectations before any technical work. This step establishes written permission, defines who is involved, sets the scope at a high level, and arranges communication and handling of sensitive data. With that groundwork in place, you can move into the actual work of the engagement safely and legally.

Once you have that authorization, you would typically address scoping and rules of engagement, then proceed to information gathering and other technical phases. Without the initial pre-engagement, attempting reconnaissance or data collection could violate legal and ethical boundaries and derail the engagement.