The information needed for a network penetration testing company to scope a test is dependent upon whether an internal pen test or an external pen test is required. Information typically sought by a network pen test provider includes the total quantity of internal IPs and external IPs to be tested, subnets, and the number of physical locations.