A client asks a penetration tester to add more addresses to a test currently in progress. Which of the following would define the target list?
A. Rules of engagement
B. Mater services agreement
C. Statement of work
D. End-user license agreement
Which of the following would define the target list?