AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-rules-of-engagement

In security testing, what do the rules of engagement (ROE) do?

Start playing free

  1. Set the CVSS scores for findings
  2. Define allowed activities and give the test team authority
  3. Guarantee that no systems will be affected

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. NIST SP 800-115, Technical Guide to Information Security Testing and Assessment nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf Checked 2026-10-10.
  2. NIST SP 800-115, Technical Guide to Information Security Testing and Assessment nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyYou sign in, and then the system decides which folders you may open. What is that second step?Security & PrivacyEncrypting a laptop's files mainly protects which part of the CIA triad?Security & PrivacyA file's hash value no longer matches after someone edits the file. Which CIA property was affected?

That's stuff everyone should know.