Types, Phases, and Approaches to Penetration Testing EHE Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   During a penetration testing engagement, after successfully exploiting a vulnerability and gaining access to a target system, which phase involves escalating privileges, maintaining access, and collecting sensitive data?

   • AScanning
   • BPost-exploitation
   • CExploitation
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to test its incident response capabilities and the effectiveness of its security monitoring. They want the test to be as realistic as possible, including attempts to evade detection. Which approach is most appropriate?

   • AAutomated vulnerability scanning only
   • BBlack-box testing with no prior knowledge
   • CWhite-box testing with full disclosure
   • DHybrid testing with manual and automated techniques
   Reveal Solution Discussion Select an answer first