What risk does automated shunning in ROE pose?

• A. It could inadvertently turn a pen test into a denial of service attack
• B. It could reveal sensitive data to testers
• C. It could slow down the testing
• D. It could bypass firewall rules

Answer: (A)

Automated shunning in ROE is a safety feature that automatically blocks or throttles test traffic when activity looks abusive under the engagement rules. The risk is that this automation can backfire: legitimate test traffic may be blocked, and to continue the assessment the tester may retry from other sources or flood the target with traffic trying to bypass the block, effectively creating a denial-of-service condition. This is why automated shunning can inadvertently turn a controlled pen test into a DoS scenario. It doesn’t inherently reveal data, slow testing as the primary risk, or bypass firewall rules.