Penetration Testing Guidelines and Recommendations EHE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which document defines the boundaries, authorized targets, and allowed techniques for a penetration test, and must be agreed upon before testing begins?

   • AIncident response plan
   • BRisk assessment matrix
   • CVulnerability report
   • DRules of engagement
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A penetration testing team is about to start an assessment for a financial institution. The team lead wants to ensure that all findings are traceable and that the client can reproduce the steps. Which practice best supports this goal?

   • AUse a single automated tool to minimize manual errors.
   • BKeep findings only in the final report to avoid overwhelming the client.
   • CMaintain a detailed log of all actions, tools, and timestamps throughout the test.
   • DDelete all test data immediately after the engagement to protect confidentiality.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is about to test a client's external network. The client has provided a list of IP ranges and domains, but the tester discovers that one of the domains resolves to a third-party cloud provider not mentioned in the scope. What should the tester do?

   • AIgnore the domain and continue testing the other in-scope targets
   • BStop testing that domain and inform the client of the discrepancy
   • CTest the domain because it is part of the client's DNS records
   • DInclude the domain in the test and note it in the final report
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A penetration tester is assessing a client's application that uses a third-party API. The client's rules of engagement prohibit testing the third-party API directly, but the application sends sensitive data to it. During testing, the tester finds that the application leaks sensitive data to the API in an insecure manner. What should the tester do?

   • ADocument the data leak as a finding and recommend remediation on the application side
   • BIgnore the finding because the API is out of scope
   • CTest the third-party API to confirm the vulnerability
   • DReport the issue directly to the third-party API provider
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A penetration tester is hired to test a company's web application. The client provides a list of allowed IP addresses and domains. During the test, the tester finds a subdomain that is not on the list but is part of the same application. What should the tester do?

   • AInclude the subdomain in the final report as a finding without testing it.
   • BTest the subdomain but only with passive techniques.
   • CStop testing and ask the client whether the subdomain is in scope.
   • DTest the subdomain because it is part of the same application.
   Reveal Solution Discussion Select an answer first