Introduction to Penetration Testing and Methodologies CPENT Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A penetration tester is engaged by a client to assess a critical web application. The client has a strict change-freeze window during the test and requires that the application remain fully available. The tester discovers a SQL injection vulnerability that could be exploited to extract sensitive data, but exploitation may cause the application to crash. The client has not authorized denial-of-service testing. What should the tester do?

   • ADocument the vulnerability, avoid exploitation that could crash the application, and include the finding in the report with a recommendation for a controlled follow-up test.
   • BExploit the SQL injection carefully to prove impact, accepting the risk of a crash.
   • CStop testing and report the SQL injection as a potential vulnerability without proof of exploitability.
   • DAsk the client for permission to crash the application during the test to prove the vulnerability.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to define the scope of a penetration test before starting?

   • ATo ensure that the test is conducted legally, ethically, and within agreed boundaries, avoiding unintended targets.
   • BTo guarantee that all vulnerabilities in the organization will be found.
   • CTo speed up the testing process by skipping the reconnaissance phase.
   • DTo eliminate the need for a written report at the end of the test.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement accurately contrasts the goals of a vulnerability assessment and a penetration test?

   • AA vulnerability assessment is a manual process, while a penetration test is an automated process.
   • BA vulnerability assessment is required by law, while a penetration test is optional.
   • CA vulnerability assessment aims to prove that a system is secure, while a penetration test aims to prove that it is insecure.
   • DA vulnerability assessment provides a broad inventory of weaknesses, while a penetration test focuses on demonstrating the exploitability and business impact of specific vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is typically included in the rules of engagement (RoE) for a penetration test?

   • AThe detailed findings of the test and recommended remediation steps.
   • BThe specific techniques and tools that are allowed or prohibited during the test.
   • CThe names of all employees involved in the organization.
   • DThe list of all vulnerabilities discovered during the test.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   After completing a penetration test, a tester must deliver a report to the client's executive team and IT staff. The executives need a high-level overview of business risk, while the IT staff need technical details for remediation. What is the best way to structure the report?

   • AInclude an executive summary with risk ratings and a separate technical section with detailed findings and remediation steps.
   • BPresent the findings verbally and skip the written report.
   • CProvide a single technical report with detailed exploit steps for all audiences.
   • DOnly provide the raw scan results and let each team interpret them.
   Reveal Solution Discussion Select an answer first