Skip to content

VAPT scoping questionnaire

General questionnaire | Networks

Answers to these questions will help us give you a more accurate estimate of the time required to perform the assessment and develop a threat profile. Please try to give as much detail as possible when answering the questions.
1.How many external IP addresses are used to test external penetration (both active and inactive)?(Required.)
2.How many internal IP addresses are used to perform external penetration testing (both active and inactive)?(Required.)
3.How many external IPs does your organisation own?(Required.)
4.How many internal IPs does your organisation own?(Required.)
5.Do you use DMZ networks?(Required.)
6.Are you connected to third-party public cloud services (such as Amazon or Azure)?(Required.)
7.Do you have any dedicated connections to other organisations' networks (such as vendors or business partners)?(Required.)
8.Do you use any remote access services?(Required.)
9.Approximately how many employees use remote access services?(Required.)
10.Please list all services (such as web applications, on-line databases, FTP or SSHdo) that your organisation uses that are connected to the internet.(Required.)
11.How many internal VLANs do you have?(Required.)
12.Approximately how many active devices are there in your datacenter network (such as servers, storage, switches, firewalls and routers with an assigned internal IP address)?(Required.)
13.Approximately how many active devices are there in your user network (including laptops and desktops, IP phones, printers and monitoring cameras with an assigned internal IP address)?(Required.)
14.Have you previously performed security testing of a similar scope?(Required.)