Penetration Testing Essential Concepts CPENT Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which action is a violation of a penetration tester's ethical responsibilities?

   • AUsing a known exploit to demonstrate impact
   • BSelling discovered data to a third party
   • CTesting only within the agreed-upon scope
   • DDisclosing discovered vulnerabilities only to the client
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is a key element that should be included in a penetration testing report?

   • AA detailed description of each vulnerability, including its risk rating and remediation steps
   • BThe exact commands used for every action taken
   • CThe tester's personal opinions about the client's security team
   • DA list of all tools used, regardless of relevance
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A penetration testing team is planning an assessment for a client that requires compliance with PCI DSS. The client wants to ensure that the testing methodology is repeatable and covers all necessary aspects. The team is considering using PTES, OSSTMM, or OWASP. Which approach is most appropriate?

   • AUse only OWASP because the client is a web application
   • BUse only OSSTMM because it is the most comprehensive standard
   • CUse a custom methodology developed in-house
   • DUse PTES as the overarching methodology and OWASP for web application testing
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A penetration testing team is planning an engagement for a client that hosts a critical web application. The client has a strict compliance requirement to follow a methodology that provides a detailed, measurable, and repeatable process for testing the security of their web application. The team lead must select a framework that is specifically designed for web applications and provides a comprehensive testing guide. Which framework is the most appropriate choice?

   • AOSSTMM, because it focuses on operational security metrics and is highly measurable
   • BOWASP Testing Guide, because it is a comprehensive and detailed guide for testing web application security
   • CNIST SP 800-115, because it is a widely recognized technical guide for information security testing
   • DPTES, because it provides a full penetration testing process from pre-engagement to reporting
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A small business owner believes that running a vulnerability scanner once a quarter is equivalent to a penetration test. The owner asks a security consultant to explain the difference. Which statement accurately describes the key distinction?

   • AA vulnerability scan requires written authorization, while a penetration test does not
   • BA penetration test is automated, while a vulnerability scan is manual
   • CBoth are identical in methodology and differ only in the tools used
   • DA vulnerability scanner identifies potential vulnerabilities, while a penetration test attempts to exploit them to prove real-world impact
   Reveal Solution Discussion Select an answer first