A civic Wi-Fi guest VLAN is in scope for discovery only, but a tester proposes starting credential attacks immediately. What should happen?
Select an answer to reveal the explanation.
Short Explanation
Discovery-only means you are allowed to map the parking lot, not hotwire the cars. If the RoE parked exploitation for later—or never—respect that lane. Interesting hosts do not rewrite the phase agreement by themselves.
Full Explanation
Phase boundaries in rules of engagement constrain which technique classes may run during a window. Discovery-only authorization covers mapping and enumeration activities, not credential attacks or implanting persistence. Expanding technique classes requires explicit agreement. Finding interesting systems does not silently widen phase permission, nor does it remove valid discovery scope.