Technical scoping of cloud services involves accurate information, an in-depth understanding of customer expectations, compliance requirements, technical deployments and specific technologies. We will review the basics of penetration testing scoping; then with the help of real-world examples, discuss the top 10 challenges of scoping penetration tests in the cloud to help reduce the number of issues that may arise. The goal is to ensure that pen tests are accurately scoped and are effective.