A city grants VPN access for an Active Directory-focused internal assessment. How should the tester characterize the starting posture?
Select an answer to reveal the explanation.
Short Explanation
VPN keys put you in the lobby, not out on the sidewalk. Internal AD work starts from that inside seat — different first moves than poking the public edge. Do not pretend you are still outside once you dialed in with permission.
Full Explanation
Internal assessments begin from an authorized inside network position, such as VPN or on-prem access, and prioritize internal targets like Active Directory. External assessments begin from the internet-facing edge without that foothold. Confusing the postures leads to wrong first techniques and wasted effort. AD-focused internal work over VPN is a normal engagement pattern, not a physical-only or out-of-scope case.