1.4 Pen testing concepts

Question 1

Active Recon

Answer 1

Involves making a connection to the target host.

Question 2

Passive Recon

Answer 2

Sniffing network traffic to identify assets communicating on the network, service ports used, and potentially some vulnerabilities.

Question 3

Black box assessment

Answer 3

The consultant is given no privileged information about the network/security system. Simulates an external threat.

Question 4

White box assessment

Answer 4

The consultant is given complete access to the network. Tester skips recon phase. Simulates a privileged insider threat.

Question 5

Gray box assessment

Answer 5

The consultant is given some information. Simulates an unprivileged insider threat.

Question 6

Pivot

Answer 6

System and/or set of privileges that allow the tester to compromise network systems.

Question 7

Pen testing vs. vulnerability scanning

Answer 7

Vulnerability scanning is more passive than pen testing.