Certified Ethical Hacker (CEH) Practice Question

The Penetration Testing Execution Standard (PTES) divides an engagement into seven phases. After the Intelligence Gathering phase, the next step is Threat Modeling. During Threat Modeling, testers and stakeholders analyze the information collected, identify business assets, define attacker profiles, and outline possible threat scenarios. This is distinct from Pre-engagement Interactions (which cover scope and contractual details), Vulnerability Analysis (which assesses systems for weaknesses after modeling is complete), and Post-Exploitation (which deals with persistence and data exfiltration after compromise). Therefore, the described workshop occurs in the Threat Modeling phase.