Prelim - Pen Testing

Question 1

Penetration Testing

Answer 1

An attempt to exploit vulnerabilities to determine whether unauthorized access or other malicious activity is possible

Question 2

Computer System Servers/Networks, Applications Vulnerabilities

Answer 2

1. Design and implementation
2. Poor system configuration
3. Insecure network
4. System complexity
5. Human errors - coding errors

Question 3

Primary purpose of Penetration Testing

Answer 3

1. To discover vulnerabilities
2. Test for security compliance
3. Verify staff awareness

Question 4

Penetration Testing Types

Answer 4

Web Application
Network Services
Social Engineering
Client Side

Question 5

Types of Penetration Testing Based on Knowledge of Target

Answer 5

• Black Box testing
• Grey Box Testing
• White Box Testing

Question 6

Black Box testing

Answer 6

Zero Knowledge of Target

Question 7

Grey Box Testing

Answer 7

Some Knowledge of Target

Question 8

White Box Testing

Answer 8

Full Knowledge of Target

Question 9

Types of Penetration Testing Based on Position of Penetration Tester

Answer 9

External Penetration Testing
Internal Penetration Testing
Targeted
Blind Test
D-Blind