MOD 18

Question 1

What is the process of identifying and prioritizing vunlerabilites in a system?

Answer 1

Vulnerability assessment

Question 2

Which type of testing focuses on penetrating network defenses and getting access?

Answer 2

Penetration Testing

Question 3

Which Pen Testing area breaches network defenses?

Answer 3

Network

Question 4

Which Pen Testing area breaches WiFi networks?

Answer 4

WiFi

Question 5

Which Pen Testing area looks for vulnerabilities in web apps?

Answer 5

Web Applications

Question 6

Which Pen Testing area looks for ways to get into mobile devices?

Answer 6

Mobile

Question 7

Which Pen Testing area checks for database vulnerabilities?

Answer 7

Database

Question 8

What is the process of ensuring a system meets the security requirements of its domain?

Answer 8

System Accredation

Question 9

What are the 5 Pen Testing Steps?

Answer 9

1) Business and Legal
2) Vulnerability Test
3) Vulnerability Analysis
4) Reporting
5) Remediation

Question 10

Which rule of behavior focuses on targets, time frames, and rules?

Answer 10

Scope of the test

Question 11

Which rule of behavior limits the approach and attacks?

Answer 11

Limitation of Testing

Question 12

Which rule of behavior says that specific goals must be set?

Answer 12

Criteria for Success

Question 13

Which knowledge test has an outsider’s view?

Answer 13

Zero knowledge test

Question 14

Which knowledge test is in-between zero and full knowledge test?

Answer 14

partial knowledge test

Question 15

Which knowledge test has what employees might see?

Answer 15

Full knowledge test

Question 16

Which rule of behavior handles incidents created by the pen testing team?

Answer 16

Incident Response

Question 17

Which rule of behavior specifies which summaries and recommendations will be provided?

Answer 17

Reporting

Question 18

What is the passive method of learning about an organization?

Answer 18

Footprinting

Question 19

What is passively identifying computers, ports, and services?

Answer 19

Scanning

Question 20

Leaving a way for later priviledged access is called a _________.

Answer 20

Back Door

Question 21

Which organization identifies vulnerabilities to services and ports?

Answer 21

National Vulnerability Database (NVD)

Question 22

Which organization classifies and scores new vulnerabilities?

Answer 22

Common Weakness Enumeration (CWE)

Question 23

Which certification is extremely hard and requires an actual penetration test?

Answer 23

OSCP

Question 24

Which certification is from EC-Councel and is a multiple choice exam?

Answer 24

CEH

Question 25

Which certification has exams offered by SANS when you take their classes?

Answer 25

GPEN