A county path requires DMZ web → internal app → AD subnet hops. What planning posture should the tester take?
Select an answer to reveal the explanation.
Short Explanation
Multi-hop pivoting is a staged road trip, not a demolition derby. You plan each leg, jot what you did, and keep proof—otherwise you get lost and cannot explain the route later. Controlled sequencing beats uncontrolled sprawl every time.
Full Explanation
Chained pivots should be planned as sequential steps with documentation and evidence at each hop. That discipline supports reporting, cleanup, and RoE compliance. Undocumented bursts and deferred evidence increase operational risk and muddy attribution. Scope still bounds which hops are allowed; discovery alone does not authorize endless chaining.