Penetration Testing Concepts GCED Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security team is planning a penetration test of a new internal application. The team has full access to the application's source code, configuration files, and network diagrams. The goal is to identify as many vulnerabilities as possible in a limited time. Which testing approach is most appropriate?

   • AGray-box testing, providing the testers with partial credentials and limited documentation.
   • BVulnerability scanning only, using automated tools to identify known issues.
   • CWhite-box testing, using the provided source code and architecture information.
   • DBlack-box testing, simulating an external attacker with no prior knowledge.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which penetration testing framework provides a detailed set of technical guidelines for testing web applications, including testing for injection, broken authentication, and security misconfigurations?

   • APTES
   • BOWASP Testing Guide
   • CNIST Cybersecurity Framework
   • DOSSTMM
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A penetration test report is being reviewed by the client's management. They want to understand the overall risk to the business and how to prioritize remediation across multiple findings. Which section of the report is most useful for this purpose?

   • AThe tester's personal notes about the client's security posture
   • BDetailed technical findings with proof-of-concept code
   • CA list of all tools used during the test
   • DExecutive summary with a risk matrix
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a penetration testing report, what is the purpose of assigning a risk rating to each finding?

   • ATo decide whether to publish the report publicly
   • BTo rank the testers based on their performance
   • CTo determine the cost of the penetration test
   • DTo prioritize remediation efforts based on the severity and likelihood of exploitation
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A penetration tester has completed reconnaissance and scanning of a target network. The rules of engagement allow exploitation but prohibit any action that could cause a denial of service. The tester identifies a service that is vulnerable to a known exploit, but the exploit has a high chance of crashing the service. What is the best course of action?

   • ARun the exploit during off-peak hours to minimize impact
   • BDo not run the exploit and document the potential impact in the report
   • CRun the exploit and hope the service recovers
   • DAsk the client for permission to run the exploit
   Reveal Solution Discussion Select an answer first