Types, Phases, and Approaches to Penetration Testing EHE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A penetration tester is given full access to the source code, architecture diagrams, and internal credentials before starting an assessment. Which type of penetration testing does this scenario describe?

   • ARed-team testing
   • BGray-box testing
   • CWhite-box testing
   • DBlack-box testing
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In which type of penetration testing does the tester receive limited information, such as standard user credentials or basic network diagrams, to simulate an insider threat?

   • AExternal testing
   • BWhite-box testing
   • CBlack-box testing
   • DGray-box testing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A penetration tester has completed the exploitation phase and has documented all the vulnerabilities found, the data accessed, and the systems compromised. The tester is now preparing a detailed report for the client. Which phase of the penetration test is this?

   • APost-exploitation
   • BReconnaissance
   • CPlanning
   • DReporting
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A penetration tester is conducting a gray-box test. The tester has been given a standard user account and limited documentation. During the scanning phase, the tester discovers a critical vulnerability that could be exploited to gain admin access. However, the rules of engagement state that the tester must not exploit vulnerabilities that could cause data loss. The tester is unsure if the exploit could cause data loss. What should the tester do?

   • AStop and consult the client before proceeding with the exploit
   • BIgnore the vulnerability and report it without testing
   • CProceed with the exploit and hope it does not cause data loss
   • DExploit the vulnerability but only to prove the concept
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A penetration testing team uses a combination of automated vulnerability scanners and manual exploitation techniques to validate findings and explore complex business logic flaws. Which approach to penetration testing does this describe?

   • AHybrid testing
   • BAutomated testing
   • CAdversarial testing
   • DManual testing
   Reveal Solution Discussion Select an answer first