Penetration Testing Concepts GCED Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   A penetration testing team is preparing to conduct a test for a client. The team needs a methodology that provides a detailed, step-by-step process for all phases of the test, from pre-engagement to reporting. Which methodology is best suited for this requirement?

   • AOWASP Testing Guide
   • BNIST SP 800-115
   • CPTES (Penetration Testing Execution Standard)
   • DOSSTMM (Open Source Security Testing Methodology Manual)
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   During a penetration test, a tester uses publicly available information to identify employee email addresses and then searches for exposed documents that mention internal software versions. Which phase of the penetration test does this activity belong to?

   • APost-exploitation
   • BReconnaissance
   • CScanning
   • DExploitation
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A penetration test is being planned for a multi-tenant cloud environment. The rules of engagement must be carefully crafted to avoid impacting other tenants. Which constraint is most important to include in the rules of engagement?

   • AA requirement to use only passive techniques
   • BA clause that the tester is not liable for any damage
   • CA statement that the tester may access any data found
   • DA list of specific IP addresses and resources that are in scope
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   After successfully exploiting a vulnerability and gaining access to a target system, a penetration tester attempts to escalate privileges and move laterally within the network. Which phase does this activity belong to?

   • AScanning
   • BReconnaissance
   • CPost-exploitation
   • DExploitation
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A penetration tester is asked to assess a third-party vendor's system. The vendor has provided a signed authorization letter, but the tester discovers that the letter only covers the vendor's internal network, not the cloud-hosted production environment that the vendor also uses. What should the tester do?

   • AInclude the cloud environment in the report as a hypothetical risk
   • BProceed with testing only the internal network as authorized
   • CAsk the vendor to verbally confirm that cloud testing is allowed
   • DTest the cloud environment because it is part of the vendor's system
   Reveal Solution Discussion Select an answer first