Vulnerability Assessments and Penetration Testing ACCISO Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In a black-box penetration test, what information is provided to the tester?

   • AFull details of the network architecture and system configurations
   • BNo prior knowledge of the target environment, simulating an external attacker
   • COnly the IP addresses of the target systems
   • DLimited information, such as user-level credentials and some documentation
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which penetration testing standard is specifically focused on web application security?

   • AOWASP
   • BISO 27001
   • CPTES
   • DOSSTMM
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is a key characteristic of an effective vulnerability assessment report?

   • AIt lists every vulnerability with technical jargon and no context
   • BIt is written only for technical staff
   • CIt focuses only on vulnerabilities that were successfully exploited
   • DIt includes actionable recommendations prioritized by risk
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which tool is commonly used in the exploitation phase of penetration testing?

   • ANmap
   • BMetasploit
   • CWireshark
   • DNikto
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is a false positive in the context of vulnerability scanning?

   • AA reported vulnerability that does not actually exist
   • BA vulnerability that exists but is not detected by the scanner
   • CA vulnerability that is considered low risk
   • DA vulnerability that has been successfully exploited
   Reveal Solution Discussion Select an answer first