During a penetration test, the tester has successfully gained access to a server and is now attempting to move laterally to other systems. The rules of engagement specify that the tester must not access or exfiltrate sensitive data. What is the most appropriate action?

Stop all testing and report the initial compromise immediately.

Continue lateral movement to demonstrate the impact, but avoid reading or copying sensitive files.

Ask the client for permission to access sensitive data, and wait for approval.

Exfiltrate a small sample of data to prove the risk, then document it in the report.

GIAC Certified Enterprise Defender

Domain 4Objective 1

Penetration Testing Concepts GCED Practice Questions (Page 4)

Part of the Penetration Testing domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 16–20

16foundation · easy
Which penetration testing methodology is known for its focus on operational security metrics and was developed by the Institute for Security and Open Methodologies (ISECOM)?
Select an answer first
17foundation · easy
Which component of the Rules of Engagement specifies the systems, networks, and applications that the penetration tester is permitted to attack?
Select an answer first
18foundation · easy
A security team is asked to identify known misconfigurations in a web server without attempting to exploit them. Which activity does this describe?
Select an answer first
19application · easy
A penetration tester is in the reconnaissance phase of a test. The tester has identified several open ports and services on the target network. What is the next phase of the penetration testing process?
Select an answer first
20application · medium
During a penetration test, the tester has successfully gained access to a server and is now attempting to move laterally to other systems. The rules of engagement specify that the tester must not access or exfiltrate sensitive data. What is the most appropriate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCED

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.

Penetration Testing Concepts GCED Practice Questions (Page 4)

Questions 16–20

Which penetration testing methodology is known for its focus on operational security metrics and was developed by the Institute for Security and Open Methodologies (ISECOM)?

Which component of the Rules of Engagement specifies the systems, networks, and applications that the penetration tester is permitted to attack?

A security team is asked to identify known misconfigurations in a web server without attempting to exploit them. Which activity does this describe?

A penetration tester is in the reconnaissance phase of a test. The tester has identified several open ports and services on the target network. What is the next phase of the penetration testing process?

During a penetration test, the tester has successfully gained access to a server and is now attempting to move laterally to other systems. The rules of engagement specify that the tester must not access or exfiltrate sensitive data. What is the most appropriate action?

Keep studying — Penetration Testing