Penetration Testing Fundamentals ECSS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A penetration testing team is planning an assessment for a client. The client wants to test its internal network but explicitly excludes the HR database from the scope. During the exploitation phase, the tester discovers that the HR database is accessible from a compromised server. What should the tester do?

   • AAsk the client for permission to include the HR database in the test.
   • BStop the test and report the out-of-scope access as a finding.
   • CAccess the HR database to prove the full impact of the compromise.
   • DIgnore the HR database and continue testing other systems.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A penetration tester has completed an assessment and is writing the final report. The client's security team is technical, but the executive management will also read the report. The tester found a critical SQL injection vulnerability in a customer-facing application. The client's management is hesitant to allocate budget for remediation because the vulnerability has not been exploited in the wild. Which approach should the tester take in the report to effectively communicate the risk?

   • AProvide a proof-of-concept exploit in the report to demonstrate the impact.
   • BInclude only the technical details of the SQL injection and let the security team explain it to management.
   • CDescribe the vulnerability in technical terms and include a risk rating of 'High' without further explanation.
   • DExplain the potential business impact, such as data breach and regulatory fines, and recommend remediation with a clear priority.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   After completing a penetration test, the tester must deliver a report to the client's management team. The management team is not highly technical and needs to understand the overall risk to the business and prioritize remediation efforts. What is the most important component to include in the executive summary of the report?

   • ADetailed exploit code and step-by-step reproduction instructions
   • BA list of all tools used during the test
   • CA high-level overview of findings, associated business risks, and recommended priorities
   • DThe complete raw output of all vulnerability scans
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A penetration tester is conducting a black-box test of a company's external web application. During the reconnaissance phase, the tester discovers that the application is hosted behind a Web Application Firewall (WAF) that blocks common attack patterns. The tester needs to identify vulnerabilities in the application. Which approach is most effective in this situation?

   • AImmediately attempt to exploit known vulnerabilities without further reconnaissance.
   • BStop the test and report that the WAF makes the application secure.
   • CManually analyze the application's behavior and craft requests that evade the WAF's detection rules.
   • DRun automated vulnerability scanners directly against the application to identify weaknesses.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which outcome is typically produced by a vulnerability assessment but not by a penetration test?

   • AA prioritized list of exploitable vulnerabilities with proof-of-concept exploits
   • BA comprehensive inventory of potential vulnerabilities and their severity ratings
   • CA demonstration of the business impact of a successful data breach
   • DA detailed narrative of the attack chain used to compromise a specific asset
   Reveal Solution Discussion Select an answer first