The first step that Ebba should take is: Information gathering and Reconnaissance.
<h3>What is an In-house Penetration Test?</h3>
An in-housePenetration test is a form of offensive test that is aimed at finding the lapses that a system has and initiating attacks to know the best way to prevent them.
Before launching such a test it is advised to plan and gather information about the possible lapses.
This will help the pen tester to know what attacks to launch and the right measures to resolve them. So, the first step that Ebba should take is Information gathering and Reconnaissance.
This question should be in physics so this is my answer in C&T format-go to a online shop and order one or the pieces then follow the instructions that will be given.