During a penetration test with limited information, what type of engagement is being performed if only the target's IP address and hostname are known?

During a penetration test with limited information, what type of engagement is being performed if only the target's IP address and hostname are known?

• A. Internal
• B. External
• C. Blind
• D. Targeted

Answer: (B)

The key idea here is distinguishing how a penetration test is scoped and where the tester operates. An external engagement means testing from outside the target’s network, focusing on assets exposed to the internet. Knowing only the target’s IP address and hostname fits this, because you’re starting with publicly reachable identifiers and are attempting to assess external defense without internal access or detailed internal knowledge. Internal would require access inside the network or credentials. Blind would imply almost no information about the target, or that you must discover everything without hints, which isn’t the case when an IP and hostname are already known. Targeted implies a highly collaborative scenario with more contextual information provided to the tester.

The key idea here is distinguishing how a penetration test is scoped and where the tester operates. An external engagement means testing from outside the target’s network, focusing on assets exposed to the internet. Knowing only the target’s IP address and hostname fits this, because you’re starting with publicly reachable identifiers and are attempting to assess external defense without internal access or detailed internal knowledge.

Internal would require access inside the network or credentials. Blind would imply almost no information about the target, or that you must discover everything without hints, which isn’t the case when an IP and hostname are already known. Targeted implies a highly collaborative scenario with more contextual information provided to the tester.