Lesson 17 - Communicating During the PenTest

Question 1

What is the most effective way to identify false positives

Answer 1

Using Results Validation - compare what you learned about the target environment to individual scan results

Question 2

If your PenTest is discovered what is the one way to address this

Answer 2

Through De-escalation and scale it back so you can proceed

Question 3

What is the name of the standard that can be used for presenting the findings

Answer 3

PTES - Penetration Testing Execution Standard

for example
Vulnerability Class Levels
Technical Vulnerabilities
Logical Vulnerabilieis
Summary

Question 4

What is the tool/platform that can be used to share data and collaborate on a PenTest called

Answer 4

Dradis

Question 5

What is the vulnerability scanner tool that has a module dedicated to reporting

Answer 5

Tenable’s Nessus Platform

Question 6

Name some of the logical vulnerabilities a PenTester may identify

Answer 6

Non-OSI
Type of Vulnerability - is a logical