Penetration Testing Essential Concepts CPENT Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A penetration tester is hired to assess a company's cloud infrastructure. The rules of engagement authorize testing of the company's own AWS account. During reconnaissance, the tester discovers that a misconfigured S3 bucket in the company's account contains customer data and is publicly accessible. The tester also notices that the bucket's access logs are stored in a separate logging account that is NOT mentioned in the rules of engagement. What should the tester do?

   • ATest the logging account to see if it is also misconfigured
   • BAccess the S3 bucket to prove the data exposure, but do not touch the logging account
   • CDownload a sample of the customer data to include in the report as evidence
   • DImmediately notify the client and stop all testing
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key goal of a vulnerability assessment that is NOT a primary goal of a penetration test?

   • ATo provide a comprehensive inventory of potential vulnerabilities across the environment.
   • BTo test the response of security monitoring and incident response teams.
   • CTo demonstrate the business impact of a specific exploited vulnerability.
   • DTo validate that security patches have been applied correctly.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the typical final phase of a penetration test?

   • APost-exploitation
   • BVulnerability analysis
   • CReporting and remediation
   • DExploitation
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security team has been asked to assess the security of a new customer-facing web portal. The team has a limited budget and needs to provide a clear, actionable list of vulnerabilities to the development team. The team decides to use an automated vulnerability scanner to identify common issues. After the scan, they manually verify the findings to eliminate false positives. They do not attempt to exploit the vulnerabilities or chain them together to demonstrate impact. What is the primary difference between this assessment and a full penetration test?

   • AThe assessment is a vulnerability assessment, while a penetration test is a more thorough version of the same process
   • BThe assessment is faster and cheaper, but it provides less detailed remediation guidance
   • CThe assessment is more accurate because it uses automated tools to eliminate human error
   • DThe assessment is less comprehensive because it does not include manual exploitation and chaining of vulnerabilities
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A penetration tester is hired to assess a legacy application that is critical to a client's business operations. The client is concerned about the stability of the application and has strict rules of engagement that prohibit any testing that could cause a denial of service or data corruption. The tester has been given the application's source code and architecture documentation. The primary objective is to identify as many vulnerabilities as possible without disrupting operations. Which testing approach is most appropriate?

   • AWhite-box testing, because it allows for a thorough analysis of the code to identify vulnerabilities without executing potentially harmful exploits
   • BBlack-box testing, because it is less likely to cause damage than white-box testing
   • CGray-box testing, because it balances the need for internal knowledge with the need to avoid disruption
   • DA vulnerability assessment, because it is less invasive than any type of penetration testing
   Reveal Solution Discussion Select an answer first