Phases of a penetration test – how do you answer ethically?

What this card says

Short answer

Scoping/rules of engagement, recon, scanning, exploitation (in scope only), post-exploitation awareness, reporting, remediation.

Example

It starts with written permission and ends with helping fix what you found.

Say it in the interview

“I stress written scope at the start and remediation support at the end.”

Why it matters

A pentest without written scope is just an attack, legally.