Audits and Assessments

Question 1

Audit

Answer 1

An investigation and evaluation of IT systems, infrastructures, policies, and operations

Question 2

Penetration Testing

Answer 2

Simulated cyber attack to identify exploitable vulnerabilities in a computer
system

Question 3

Physical Penetration Testing

Answer 3

Evaluates an organization’s physical security measures

Question 4

Known Environment

Answer 4

Penetration testers have detailed information about the target
infrastructure

Resembles an insider threat scenario

Question 5

Partially Known Environment

Answer 5

Testers have limited information, simulating a scenario where an attacker
has partial inside knowledge

Question 6

Unknown Environment

Answer 6

Simulates a real-world external attacker aiming to find entry points and
vulnerabilities

Question 7

Metasploit

Answer 7

Multipurpose computer security and penetration testing framework