Ethical Hacking Midterms

Front

Which statement best describes the term ethical hacker?

Back

a person who mimics an attacker to evaluate the security posture of a network

Front

Which threat actor term describes a well-funded and motivated group that will use the latest attack techniques for financial gain?

Back

organized crime

Front

Which type of threat actor uses cybercrime to steal sensitive data and reveal it publicly to embarrass a target?

Back

hacktivist

Front

What is a state-sponsored attack?

Back

An attack perpetrated by governments worldwide to disrupt or steal information from other nations.

Front

What is an insider threat attack?

Back

An attack perpetrated by disgruntled employees inside an organization.

Front

What kind of security weakness is evaluated by application-based penetration tests?

Back

logic flaws

Front

What two resources are evaluated by a network infrastructure penetration test? (Choose two.)

Back

AAA servers

IPSs

Front

When conducting an application-based penetration test on a web application, the assessment should also include testing access to which resources?

Back

back-end databases

Front

What is the purpose of bug bounty programs used by companies?

Back

reward security professionals for finding vulnerabilities in the systems of the company

Front

What characterizes a partially known environment penetration test?

Back

The test is a hybrid approach between unknown and known environment tests.