Which PTES phase directly addresses client expectations and engagement boundaries before testing begins?

• A. Reconnaissance
• B. Scoping and rules of engagement
• C. Post-engagement review
• D. Pre-engagement interactions

Answer: (D)

The main concept is setting expectations and boundaries before any testing starts. Pre-engagement interactions are where you and the client align on objectives, scope, and the rules under which testing will occur. This includes what will be tested, what is out of scope, permitted testing methods, timing, data handling, reporting expectations, and who has authority to approve activities. Getting this agreement in writing upfront prevents scope creep, miscommunications, and legal or contractual issues once work begins, and it clearly defines success criteria and acceptance criteria for the engagement. Reconnaissance comes after testing begins as part of information gathering; post-engagement review happens after testing to summarize findings; while scoping and rules of engagement are discussed early, the phase that directly addresses client expectations and engagement boundaries before testing starts is pre-engagement interactions.