Chapter 1.4

Question 1

action on objectives

Answer 1

Action on objectives refers to the adversary or penetration tester stealing data from one or more systems (a.k.a. data exfiltration).

Question 2

passive reconnaissance

Answer 2

Vulnerability scanning generally uses passive reconnaissance techniques. A vulnerability scanner would probe the network or application to try to discover issues but would not attempt to exploit any vulnerabilities found.

Question 3

Vulnerability scanning

Answer 3

Vulnerability scanning is the process of auditing a network (or application) for known vulnerabilities. Vulnerability scanning does not exploit any vulnerabilities discovered.

Question 4

Active reconnaissance

Answer 4

Penetration testing is an active reconnaissance technique, and requires active testing of security controls, such as exploiting vulnerabilities.