Penetration Testing Essential Concepts CPENT Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of the rules of engagement (RoE) in a penetration test?

   • ATo replace the need for a separate contract or authorization letter
   • BTo provide a detailed technical guide for exploiting vulnerabilities
   • CTo define the boundaries and conditions under which the test is conducted
   • DTo list all potential vulnerabilities in the target environment
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester is hired by a company to test the security of its external web servers. During the engagement, the tester discovers a critical vulnerability that could allow an attacker to access the internal network. The tester is tempted to use this vulnerability to pivot deeper into the internal network to demonstrate the full impact, even though the rules of engagement explicitly limit testing to the external web servers. What is the most appropriate action for the tester to take?

   • AAsk the client for permission to expand the scope in real-time via a phone call
   • BPivot into the internal network to demonstrate the full business impact of the vulnerability
   • CDocument the finding and continue testing within the defined scope, noting the potential for lateral movement in the report
   • DStop the test and report the vulnerability immediately to the client
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A penetration tester has completed a test for a client and is writing the final report. The client's management team is non-technical and needs to understand the overall risk posture, while the IT team needs specific technical details to remediate the issues. What is the best structure for the report to meet the needs of both audiences?

   • AA presentation for management and a verbal briefing for the IT team
   • BAn executive summary for management and a separate technical report for the IT team
   • CA single, highly technical report that includes all details for the IT team
   • DA technical report with a brief summary at the beginning for management
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A penetration tester is planning a web application assessment and wants to follow a methodology that provides detailed testing guidelines for common web vulnerabilities such as injection, broken authentication, and XSS. Which framework or standard is most appropriate to reference?

   • APTES (Penetration Testing Execution Standard)
   • BOSSTMM (Open Source Security Testing Methodology Manual)
   • CISO/IEC 27001
   • DOWASP Testing Guide
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A penetration testing team is working on a large engagement that includes network, web application, and social engineering components. The team lead wants to ensure that the testing process is well-documented and follows a recognized standard. The client also requires that the final report include a clear mapping of findings to business risks. Which combination of frameworks and reporting practices is most effective?

   • AUse a custom framework and provide only a list of vulnerabilities
   • BUse OSSTMM and omit the executive summary to keep the report concise
   • CUse PTES for the overall process and include a risk-rated executive summary in the report
   • DUse only OWASP and include only technical details in the report
   Reveal Solution Discussion Select an answer first