Topic 3

Question 1

An attempt to exploit vulnerabilities to determine whether unauthorized access or other malicious activity is possible

Answer 1

Penetration Testing

Question 2

Computer System Servers/Networks, Applications Vulnerabilities

Answer 2

Design and implementation
Poor system configuration
Insecure network
System complexity
Human errors - coding errors

Question 3

Primary purpose of Penetration Testing

Answer 3

To discover vulnerabilities
Test for security compliance
Verify staff awareness

Question 4

Phases of Penetration Testing

Answer 4

Planning & Reconnaissance
Scanning & Discovery
Exploitation
Risk analysis and Suggestions
Report Generation

Question 5

Penetration Testing Types

Answer 5

Web Application
Network Services
Social Engineering
Client Side

Question 6

Types of Penetration Testing Based on Knowledge of Target

Answer 6

Black Box testing
Grey Box Testing
White Box Testing

Question 7

Zero Knowledge of Target

Answer 7

Black Box testing

Question 8

Some Knowledge of Target

Answer 8

Grey Box Testing

Question 9

Full Knowledge of Target

Answer 9

White Box Testing

Question 10

Types of Penetration Testing Based on Position of Penetration Tester

Answer 10

External Penetration Testing
Internal Penetration Testing
Targeted
Blind Test
D-Blind