During a penetration test, when should the lead tester provide a status report to the client?
Immediately after the penetration test is concluded
Only when high-severity vulnerabilities are discovered
At predetermined intervals specified by the rules of engagement or the contract
After each individual vulnerability is found