Penetration Testing Fundamentals ECSS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In which penetration testing phase does the tester gather information about the target without actively interacting with it?

   • AExploitation
   • BScanning
   • CPost-exploitation
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which component is typically included in a penetration testing report to help prioritize remediation efforts?

   • AA guarantee that all vulnerabilities have been fully remediated
   • BThe tester's personal opinions about the organization's security team
   • CRisk ratings for each identified vulnerability
   • DA list of all employees' passwords discovered during the test
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A penetration testing firm is bidding on a contract to test a critical infrastructure system. The client wants a realistic assessment of an external attacker's capabilities but also requires that the test not disrupt operations. The firm must choose a testing approach that balances realism with safety. Which approach is most appropriate?

   • AGray-box testing with limited knowledge and strict rules of engagement to control disruptive actions.
   • BWhite-box testing with full system knowledge to minimize the risk of unexpected failures.
   • CBlack-box testing with no prior knowledge to simulate a real external attacker.
   • DVulnerability assessment only, to avoid any exploitation-related risk.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   After completing a penetration test, a consultant prepares the final report for the client's management team. The report must help prioritize remediation efforts based on the potential impact to the business. Which section of the report is most important for this purpose?

   • ARaw vulnerability scan output
   • BDetailed logs of all commands executed during the test
   • CList of tools used with version numbers
   • DExecutive summary with risk ratings and prioritized findings
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A financial firm hires an external security consultant to test its internal web application. The consultant is given valid user credentials, network diagrams, and source code to speed up the assessment. The goal is to identify as many vulnerabilities as possible within a limited testing window. Which type of penetration test is being performed?

   • ABlack-box testing, because the consultant has no prior knowledge of the system.
   • BWhite-box testing, because the consultant has full knowledge of the system architecture and credentials.
   • CRed-team testing, because the consultant is simulating an external attacker.
   • DGray-box testing, because the consultant has partial knowledge of the system.
   Reveal Solution Discussion Select an answer first