Penetration Testing Fundamentals ECSS Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A penetration tester is about to start an assessment for a client. The rules of engagement specify that testing is allowed only between 2 AM and 6 AM on the production network, and that no denial-of-service attacks are permitted. During the reconnaissance phase, the tester discovers a critical vulnerability that could be exploited quickly. What should the tester do first?

   • AIgnore the rules of engagement because the vulnerability is critical.
   • BDocument the vulnerability and continue with the scheduled testing window.
   • CExploit the vulnerability immediately to avoid losing the window.
   • DAsk the client for an emergency authorization to test immediately.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A penetration tester is engaged to test a company's external web application. The rules of engagement allow testing only during off-peak hours and prohibit any action that could cause a denial of service. During the scanning phase, the tester finds that the application is vulnerable to a slowloris attack, which could exhaust server resources. What should the tester do?

   • AReport the vulnerability without actively exploiting it, explaining the potential impact.
   • BPerform the attack but limit it to a single connection to avoid a full denial of service.
   • CDemonstrate the slowloris attack during off-peak hours to prove the vulnerability.
   • DAsk the client for permission to perform the attack during the test window.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is it important to define the scope of a penetration test before starting?

   • ATo eliminate the need for a formal contract or authorization
   • BTo ensure that the test is conducted only against authorized systems and to avoid unintended damage
   • CTo guarantee that all vulnerabilities will be found and fixed
   • DTo allow testers to use any technique without restrictions
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A penetration tester is following the PTES methodology for a client engagement. After completing the initial reconnaissance and scanning phases, the tester has identified several potential entry points. According to PTES, what should the tester do next?

   • AProceed to the exploitation phase, ensuring all actions are within the agreed scope.
   • BBegin exploitation of the most promising entry point.
   • CReport the findings to the client and wait for approval.
   • DWrite the final report based on the scanning results.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to verify whether a recently patched vulnerability in its public-facing application is actually exploitable by an attacker. The security team has already run a vulnerability scanner and confirmed the patch is applied. What should they do next to validate the security control?

   • ADisable the application until a full code review is completed.
   • BRun another vulnerability scan with a different scanner to confirm the patch.
   • CReview the patch documentation and trust the vendor's fix.
   • DPerform a penetration test that attempts to exploit the vulnerability.
   Reveal Solution Discussion Select an answer first