Possessing the technical capability to circumvent security controls does not grant an individual authorization to test or access a system without explicit permission.

### Why this is right The review defines a hacker as someone who circumvents computer security and uses resourcefulness to solve problems. The statement closely reflects that description. ### The concept The term describes a capability and approach, not by itself whether an action is authorized or harmful. Security testing must be conducted with permission and within an agreed scope. ### Watch out Do not assume that the word “hacker” alone establishes authorization. Permission and scope are separate questions. ### Terms - **Scope**: The systems and actions that an assessment is permitted to include. ### Remember A description of hacking ability does not grant permission to test a system.