Within the rules of engagement, what must be defined to bound testing time?

• A. After-hours only
• B. Start and end dates with valid test times
• C. Random testing windows
• D. No time constraints

Answer: (B)

Defining when testing can occur creates a bounded, auditable window that keeps the activity within agreed legal and contractual limits. The rules of engagement should specify a start date, an end date, and the exact times during those days when testing is allowed. This ensures both parties know precisely when testing may happen, helps coordinate with operations, and supports containment and escalation if issues arise. The option that includes start and end dates with valid test times is the best because it clearly constrains the duration and the allowed hours, typically accounting for time zones and business hours.

Other approaches are insufficient: focusing only on after-hours narrows the window without establishing a full start-to-end period; random testing windows introduce unpredictability and potential scope creep; having no time constraints leaves testing unbounded and risky.