During the preliminary phase of a penetration test, you are given a list of web applications owned by the client company that are to be assessed. The client has emphasized the importance of staying within the boundaries of the scoped engagement. Which of the following actions BEST ensures that the penetration test aligns with the client's requirements?
Immediately start a manual assessment of the first web application on the list to understand its functionality.
Consult the penetration testing team's standard checklist for application assessments before starting.
Review the contract and scope of work documents to confirm the web applications and types of tests that are authorized.
Begin testing with automated scanning tools to quickly identify potential vulnerabilities in the web applications.