Penetration Test Planning GPEN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A penetration tester has completed an engagement and is preparing the final report for a client. The client's stakeholders include both technical staff and executive management. The report must communicate the risks and remediation steps effectively to both audiences. What is the best approach for structuring the report?

   • AInclude an executive summary with high-level findings and business impact, followed by a detailed technical section with specific vulnerabilities, evidence, and remediation steps.
   • BProvide a report with only the remediation steps and no vulnerability details, to keep the document concise and actionable.
   • CWrite a single technical report with all findings, evidence, and remediation steps, and provide a separate verbal briefing to executives.
   • DFocus the report on the most critical findings only, with detailed technical explanations for each, and omit lower-risk issues to avoid overwhelming the audience.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is planning an engagement for a client that wants to validate the effectiveness of its incident response procedures. The client has asked the tester to simulate a realistic attack that would trigger the incident response team. Which success criterion would best measure the effectiveness of the incident response procedures?

   • AThe tester's actions are detected by the incident response team within a defined time frame, and the team correctly identifies the attack vector.
   • BThe tester identifies all vulnerabilities in the target environment and provides a detailed report.
   • CThe tester successfully compromises a critical system and maintains access for an extended period.
   • DThe tester completes the engagement without being detected by the incident response team.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which tool is commonly used to perform network port scanning and service enumeration during the scanning phase of a penetration test?

   • ANmap
   • BHydra
   • CBurp Suite
   • DJohn the Ripper
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A penetration tester is engaged by a multinational corporation to assess the security of its global network. The corporation has offices in multiple countries, including regions with strict data protection laws. The client has requested a test that includes the corporate headquarters' internal network and the cloud-based customer relationship management (CRM) system. The client has specified that the test must not involve any data exfiltration and must not disrupt the CRM system's availability. The tester has been given credentials for a standard user account in the CRM system. Which scope and rules of engagement are most appropriate?

   • AInclude the internal network and the CRM system, but allow the tester to disrupt the CRM system's availability if necessary to test its resilience.
   • BInclude the corporate headquarters' internal network and the CRM system, with a rule that no data exfiltration is allowed and that the CRM system's availability must be maintained.
   • CInclude the internal network and the CRM system, but allow data exfiltration to a controlled environment to demonstrate the full impact of a breach.
   • DInclude only the CRM system, as it is the most critical asset, and exclude the internal network to reduce the risk of disruption.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which item is a required component of a rules of engagement document to ensure that the client can be notified immediately if an unexpected critical issue is discovered during testing?

   • AEmergency contact information
   • BList of testing tools
   • CNetwork topology
   • DSuccess criteria
   Reveal Solution Discussion Select an answer first