The first thing that the systems administrator must do before planning a penetration test for company resources that are hosted in a public cloud is to consult the cloud services provider's policies and guidelines. Penetration testing is a type of security assessment that involves simulating an attack on a system or network to identify vulnerabilities and weaknesses. However, not all cloud services providers allow penetration testing on their platforms, or they may have specific rules and requirements for conducting such tests. The systems administrator should check the cloud services provider's policies and guidelines and obtain their permission and approval before performing any penetration testing. Reference: CompTIA Cloud+ Certification Exam Objectives, Domain 2.0 Security, Objective 2.4 Given a scenario, implement security automation and orchestration in a cloud environment.