Topic 3 - Reset

Question 1

Penetration Testing

Answer 1

An attempt to exploit vulnerabilities to determine whether unauthorized access or other malicious activity is possible

Question 2

Computer System Servers/Networks, Applications Vulnerabilities

Answer 2

1. Design and implementation
2. Poor system configuration
3. Insecure network
4. System complexity
5. Human errors - coding errors

Question 3

Primary purpose of Penetration Testing

Answer 3

1. To discover vulnerabilities
2. Test for security compliance
3. Verify staff awareness

Question 4

Phases of Penetration Testing

Answer 4

1. Planning & Reconnaissance
2. Scanning & Discovery
3. Exploitation
4. Risk analysis and Suggestions
5. Report Generation

Question 5

Penetration Testing Types

Answer 5

1. Web Application
2. Network Services
3. Social Engineering
4. Client Side

Question 6

Types of Penetration Testing Based on Knowledge of Target

Answer 6

1. Black Box testing
2. Grey Box Testing
3. White Box Testing

Question 7

Types of Penetration Testing Based on Knowledge of Target

Black Box testing

Answer 7

Zero Knowledge of Target

Question 8

Types of Penetration Testing Based on Knowledge of Target

Grey Box Testing

Answer 8

Some Knowledge of Target

Question 9

Types of Penetration Testing Based on Knowledge of Target

White Box Testing

Answer 9

Full Knowledge of Target

Question 10

Types of Penetration Testing Based on Position of Penetration Tester

Answer 10

1. External Penetration Testing
2. Internal Penetration Testing
3. Targeted
4. Blind Test
5. D-Blind

Question 11

An attempt to exploit vulnerabilities to determine whether unauthorized access or other malicious activity is possible

Answer 11

Penetration Testing

Question 12

1. To discover vulnerabilities
2. Test for security compliance
3. Verify staff awareness

Answer 12

Primary purpose of Penetration Testing

Question 13

1. Planning & Reconnaissance
2. Scanning & Discovery
3. Exploitation
4. Risk analysis and Suggestions
5. Report Generation

Answer 13

Phases of Penetration Testing

Question 14

1. Web Application
2. Network Services
3. Social Engineering
4. Client Side

Answer 14

Penetration Testing Types

Question 15

1. Black Box testing
2. Grey Box Testing
3. White Box Testing

Answer 15

Types of Penetration Testing Based on Knowledge of Target

Question 16

Zero Knowledge of Target

Answer 16

Types of Penetration Testing Based on Knowledge of Target

Black Box testing

Question 17

Some Knowledge of Target

Answer 17

Types of Penetration Testing Based on Knowledge of Target

Grey Box Testing

Question 18

Full Knowledge of Target

Answer 18

Types of Penetration Testing Based on Knowledge of Target

White Box Testing

Question 19

1. External Penetration Testing
2. Internal Penetration Testing
3. Targeted
4. Blind Test
5. D-Blind

Answer 19

Types of Penetration Testing Based on Position of Penetration Tester