ProProf - Penetration Testing MCQ Quiz

Question 1

Is penetration testing used to help or to damage a system?
A. Helping
B. Securing
C. Damaging
D. Both A & C

Answer 1

Helping

Question 2

Which of the following are ways to conduct penetration testing?
A. Black Box Testing, White Box Testing, Grey Box Testing
B. Black Box Testing, Red Box Testing, Grey Box Testing
C. White Box Testing, Brown Box Testing, Red Box Testing
D. Black Box Testing, Green Box Testing, White Box Testing

Answer 2

Black Box Testing, White Box Testing, Grey Box Testing

Question 3

Penetration testing should focus on what scenarios?
A. Most likely
B. Most dangerous
C. Both
D. None

Answer 3

Both

Question 4

________ is not included in penetration tests.
A. To identify the automated system failure
B. Determining the feasibility
C. Both
D. None

Answer 4

To identify the automated system failure.

Question 5

What is social engineering?
A. Using force to gain access to the information you need
B. Hacking either telecommunication or wireless networks to gain access to the information you need
C. Using manipulation to deceive people that you are someone you are not to gain access to the information you need
D. Using force to gain all the information available

Answer 5

Using manipulation to deceive people that you are someone you are not to gain access to the information you need

Question 6

Which of the following Operating Systems are most effective in penetration testing in networks?
A. Ubuntu, Red Hat, Arch Linux
B. Windows, Mac OSX, Google Chrome OS
C. BackTrack, Helix, PHLAK
D. None of these

Answer 6

BackTrack, Helix, PHLAK

Question 7

An incorrect statement about the Web Application Firewall (WAF) would be
A. It identifies dangerous malformed attacks
B. It can identify malicious worms
C. Both
D. None

Answer 7

None

Question 8

What is the risk involved in doing penetration testing?
A. You have to pay for the testing
B. Some operations of the company might slow down
C. Skynet takes over the world
D. None of these

Answer 8

Some operations of the company might slow down.

Question 9

Which of the following groups must a penetration testing review?
A. Documentation, Log, System Configuration, Ruleset, Network Sniffing, File Integrity
B. Documentation, Log, System Configuration, Network Sniffing, File Integrity
C. Documentation, Log, System Configuration, Network Sniffing, Ruleset, File Integrity, Personnel
D. None of these

Answer 9

Documentation, Log, System Configuration, Ruleset, Network Sniffing, File Integrity