What credential strategy is commonly used to assess a PenTest team's reliability?

• A. Only a college degree.
• B. Recent certifications and experience including PenTest+ and CEH, plus background checks.
• C. No credentials needed.
• D. Only vendor affiliation.

Answer: (B)

Assessing a PenTest team's reliability comes from proof of skill, current hands-on ability, and trustworthy character. Certifications and recent experience provide that evidence. Certifications like PenTest+ and CEH are recognized benchmarks that test practical knowledge, methodologies, and reporting expectations. They show the team member has met standardized criteria and stays up to date with industry practices. Pairing this with recent, relevant pentesting work demonstrates they can apply what they know in real environments.

Background checks add a layer of trust, important when a team will access client networks and sensitive data. They help ensure integrity and dependability beyond just technical ability. Together, verified certifications, current experience, and background checks give a well-rounded picture of both capability and reliability.

Other options miss one or more of these elements. A college degree alone might not reflect current hands-on skills. No credentials provides little to no proof of ability. Focusing solely on vendor affiliation can indicate bias or limited scope rather than independent verification of skills and trustworthiness.