H10

Question 1

Know the 3 Security Controls and the 3 Categories. Give some examples

Answer 1

physical, technical, organisational
prevention, detection, correction

Question 2

What is FAR/FRR/CER

Answer 2

• FAR: False Acceptance Rate,
  % ongeautoriseerden die onterecht geaccepteerd worden
• FRR: False Rejection Rate,
  % geautoriseerden die onterecht geweigerd worden
• Cross-Over Error Rate,
  punt waar FRR = FAR

Question 3

Know the 5 domains of a pentest.

Answer 3

planning
info verzamelen
exploits
tools
reporting

Question 4

How to plan a pentest?

Answer 4

toestemming vragen
scoping
target-audience zoeken
cummunicatie
budget
beperkingen