Penetration Testing Flashcard

Front

Which of the following BEST describes a black-box penetration test? The tester has no prior knowledge of the system being tested.

Back

The tester has no prior knowledge of the system being tested.

Front

What is a primary reason for conducting a red team penetration test over a traditional vulnerability scan?

Back

To emulate a real-world advanced persistent threat (APT)

Front

Which of the following is NOT a typical objective of network penetration testing? Bypassing firewalls and IPS/IDS systems, Assessing the effectiveness of security controls, Identifying exploitable vulnerabilities

Back

Conducting a complete forensic investigation

Front

When setting up a lab for network penetration testing, why is network isolation important?

Back

To prevent testing activities from affecting production systems

Front

Which of the following is MOST likely to be exploited in a poorly configured virtual machine in a penetration testing lab? Misconfigured CPU allocation, Unsupported hardware components, Incorrect RAM allocation

Back

Unpatched guest operating system vulnerabilities

Front

Which of the following factors makes Kali Linux a popular choice for penetration testers? It supports advanced encryption out of the box, It includes a wide variety of open-source tools for offensive security testing, It is pre-installed with popular commercial software, It has lower system requirements compared to other distributions

Back

It includes a wide variety of open-source tools for offensive security testing

Front

What is a potential risk of using outdated vulnerable systems in a penetration testing lab?

Back

They may no longer simulate realistic attack vectors

Front

Which type of reconnaissance involves actively interacting with the target network, potentially risking detection?

Back

Active reconnaissance

Front

In vulnerability identification, which tool uses a combination of local and remote tests to detect system misconfigurations and missing patches? Options: John the Ripper, Nessus, Hydra, Wireshark

Back

Nessus

Front

Which phase involves exploiting vulnerabilities to gain unauthorized access to systems?

Back

Exploitation