1.8 Explain the techniques used in penetration testing Flashcards
1
Q
White box
A
Known environment
2
Q
Black box
A
Unknown environment
3
Q
Gray box
A
Partially known environment
4
Q
Rules of engagement (RoE)
A
PenTesting document defining means and manner which testing is to be performed/conducted.
-Include specifics on scope, types of tests, and depth/extent of testing
5
Q
Lateral movement
A
When a pivot is successful and attacker gains level of remote control over another system
6
Q
Persistence
A
Long-term access maintaining
7
Q
Pivoting
A
Focus attack efforts on a new target once initial breach is successful
8
Q
Exercise types
A
Red team
-Attackers in pentest exercise
Blue team
-Defenders pentest exercise
White team
-Referee
-Establish guidelines, RoE, etc.
Purple team
-A single team performing offensive and defensive penetration testing
9
Q
A
