Ethical Hacking Scope, Methodologies, and Frameworks EHE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration testing team is preparing to test a client's infrastructure. The team wants to ensure that the testing is conducted in a consistent and repeatable manner. They decide to adopt a framework that provides a common language and a structured process for penetration testing. Which framework is best suited for this goal?

   • ACIS Controls
   • BITIL
   • CCOBIT
   • DPTES
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a well-known framework used to structure penetration testing and ethical hacking processes?

   • AISO 27001
   • BPTES (Penetration Testing Execution Standard)
   • CTOGAF
   • DITIL
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A penetration tester is conducting an assessment and has successfully exploited a vulnerability to gain access to a server. The tester wants to determine the extent of the compromise and identify additional systems that can be accessed. According to common methodologies, what should the tester do next?

   • APerform post-exploitation activities, including lateral movement and privilege escalation.
   • BRun a vulnerability scanner on the compromised server.
   • CRestore the system to its original state.
   • DImmediately write the final report.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An ethical hacker has been hired to test a company's web application. Which of the following actions is within the ethical and legal boundaries of the engagement?

   • AAttempting to exploit vulnerabilities only on the web application and its associated servers that are listed in the signed authorization
   • BScanning and testing all IP addresses in the company's range, including third-party hosted services, to be thorough
   • CContinuing the test after the agreed time window to ensure all vulnerabilities are found
   • DUsing social engineering to trick employees into revealing passwords, even if not mentioned in the scope
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following describes the primary purpose of a methodology in ethical hacking?

   • ATo guarantee that all vulnerabilities will be discovered in every assessment
   • BTo replace the need for skilled security professionals by automating all testing
   • CTo ensure that the ethical hacker can bypass legal restrictions during testing
   • DTo provide a structured, repeatable process for planning and executing security assessments
   Reveal Solution Discussion Select an answer first