Penetration Testing Essential Concepts CPENT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A penetration tester is preparing for an engagement with a new client. The client has provided a document that outlines the scope, objectives, timelines, and boundaries of the test. The document also specifies the testing techniques that are allowed and the points of contact for the engagement. What is this document called?

   • AMemorandum of Understanding (MoU)
   • BStatement of Work (SoW)
   • CRules of Engagement (RoE)
   • DService Level Agreement (SLA)
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A penetration tester is conducting an engagement for a client. During the test, the tester discovers that the client's web server is vulnerable to SQL injection. The tester decides to exploit this vulnerability to extract the entire database, including customer records, to prove the impact. The rules of engagement specify that testing should be limited to demonstrating vulnerability and should not involve extracting sensitive data. What is the most appropriate action for the tester to take?

   • AStop the test and report the SQL injection vulnerability to the client immediately
   • BExtract a small, non-sensitive sample of data to prove the vulnerability without violating the rules of engagement
   • CDocument the SQL injection vulnerability and demonstrate its impact without extracting sensitive data
   • DExtract the data and include it in the report to show the full impact to the client
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A penetration testing team is asked to assess a critical infrastructure environment. The client is concerned about system availability and wants to minimize the risk of disruption. The team must decide between a black-box test that includes active exploitation and a white-box test that focuses on configuration review and static analysis. Which approach best balances the client's need for thorough security validation with the constraint on availability?

   • AGray-box test with limited active exploitation, focusing on high-risk vulnerabilities and using non-destructive techniques
   • BBlack-box test with active exploitation, as it provides the most realistic results
   • CPerform no active testing and rely solely on the client's existing vulnerability scans
   • DWhite-box test with configuration review and static analysis only
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A penetration testing team is hired to assess the security of a new mobile application. The client provides the team with the app's API documentation and a valid tester account but does not provide the source code. The team is expected to test the app's behavior and server-side APIs. Which type of penetration test does this describe?

   • AWhite-box testing
   • BRed team testing
   • CGray-box testing
   • DBlack-box testing
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A penetration testing team is planning an engagement for a client that has a complex network infrastructure. The client wants to ensure that the testing methodology is comprehensive and covers all aspects of the network, including physical security, social engineering, and wireless testing. The team lead needs to select a framework that provides a broad, operational security testing methodology. Which framework is the most appropriate choice?

   • ANIST SP 800-115, because it is a widely recognized technical guide for security testing
   • BPTES, because it provides a comprehensive penetration testing process from pre-engagement to reporting
   • COWASP Testing Guide, because it is the most widely used framework for web applications
   • DOSSTMM, because it provides a comprehensive methodology for testing operational security, including physical, human, and wireless
   Reveal Solution Discussion Select an answer first