Introduction to Penetration Testing and Methodologies CPENT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team has been running automated vulnerability scans quarterly for the past year. The scans have identified several 'High' severity vulnerabilities, but the team has not been able to determine which ones are actually exploitable. The team's manager wants to understand the real risk to the organization and prioritize remediation efforts. The team has a limited budget and must choose between continuing the vulnerability scans or hiring a penetration tester. What should the team do?

   • APurchase a more expensive vulnerability scanner that provides more accurate CVSS scores.
   • BContinue the quarterly vulnerability scans and use the CVSS scores to prioritize remediation.
   • CHire a penetration tester to validate the exploitability of the identified vulnerabilities and assess their business impact.
   • DIncrease the frequency of the vulnerability scans to monthly to get more up-to-date data.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A penetration tester has completed an assessment and is writing the final report. The client's legal team has requested that the report include a clear distinction between confirmed exploitable findings and theoretical risks. The report must also prioritize remediation based on business impact. What is the best way to structure the findings section?

   • AProvide a single narrative describing all findings without categorization.
   • BSeparate findings into 'Confirmed Exploitable' and 'Potential Risks' sections, each with risk ratings and remediation recommendations.
   • CList all findings in a single table sorted by CVSS score.
   • DInclude only the confirmed exploitable findings and omit theoretical risks.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A healthcare organization wants to verify that its new web portal is resistant to OWASP Top 10 attacks before go-live. The compliance team also needs documented evidence of specific exploit attempts and their success. The budget allows for one assessment. Which approach best meets both needs?

   • ADeploy a web application firewall and rely on its logs as evidence of protection.
   • BPerform a configuration review of the web server and application settings.
   • CConduct a manual penetration test with defined rules of engagement and a detailed report of exploited vulnerabilities.
   • DRun an automated vulnerability scanner and patch all reported vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester is hired to evaluate the internal network security of a hospital. The hospital's IT team wants to simulate an attack by a malicious insider who has standard user credentials and knows the internal network layout. The tester is given a standard user account and a network diagram. The hospital requires that the test not disrupt patient care systems. What type of test and initial phase should the tester use?

   • ABlack-box testing, starting with the exploitation phase to use the provided credentials immediately.
   • BExternal testing, starting with the pre-engagement phase to document the rules of engagement.
   • CGray-box testing, starting with the reconnaissance phase to validate the network diagram and identify active systems.
   • DWhite-box testing, starting with the scanning phase to enumerate all services on the network.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of a penetration testing methodology like PTES or OSSTMM?

   • ATo replace the need for skilled penetration testers by providing step-by-step scripts.
   • BTo automatically exploit vulnerabilities without human intervention.
   • CTo guarantee that all vulnerabilities will be found in every test.
   • DTo provide a standardized, structured approach to conducting penetration tests, ensuring consistency and completeness.
   Reveal Solution Discussion Select an answer first