Penetration Testing Fundamentals ECSS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration tester is performing an assessment of a corporate network. After successfully exploiting a web server, the tester wants to determine whether the compromised server can be used to reach internal systems that are not directly accessible from the internet. Which phase of the penetration testing process does this activity belong to?

   • AReconnaissance
   • BExploitation
   • CPost-exploitation
   • DScanning
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A penetration tester is asked to assess a new application. The client is concerned about insider threats and wants to simulate an employee with legitimate access to the application but no administrative privileges. The tester is given a standard user account and is told to try to escalate privileges. Which type of testing is this, and what is the primary advantage?

   • ARed-team testing, because it simulates a malicious insider.
   • BGray-box testing, because it simulates an authenticated user with limited privileges.
   • CBlack-box testing, because it simulates an external attacker.
   • DWhite-box testing, because it provides full source code to find privilege escalation flaws.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is planning a penetration test of its new mobile application. The development team is concerned about the security of the backend APIs. The company wants to test the application's security thoroughly but also wants to avoid any disruption to the production environment. Which testing approach would best balance thoroughness and safety?

   • ABlack-box testing against the production environment to simulate a real attacker.
   • BGray-box testing against production with limited credentials.
   • CVulnerability scanning only, without manual testing.
   • DWhite-box testing against a staging environment with full access to source code and documentation.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the purpose of rules of engagement in a penetration test?

   • ATo provide a detailed report of all vulnerabilities found
   • BTo define the boundaries and constraints of the test, such as allowed times and prohibited actions
   • CTo guarantee that the test will not cause any disruption to business operations
   • DTo specify the exact tools and techniques that must be used
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company wants to assess its network security posture. They have a limited budget and need to identify as many known vulnerabilities as possible across their infrastructure, but they do not need to demonstrate actual exploitation or business impact. Which type of assessment should they choose?

   • AA red team exercise simulating an advanced adversary
   • BA vulnerability assessment using automated scanners and manual verification
   • CA security audit focused on compliance with internal policies
   • DA full penetration test with exploitation and post-exploitation activities
   Reveal Solution Discussion Select an answer first