Penetration Test Planning GPEN Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A financial institution wants to test its online banking platform. The platform is critical to the business, and any downtime would result in significant financial losses. The institution wants to test the platform's resistance to a distributed denial-of-service (DDoS) attack, but they are concerned about the impact on legitimate users. Which of the following rules of engagement best balances the need to test DDoS resistance with the need to avoid disruption?

   • AAllow a full-scale DDoS test against the production platform during off-peak hours, with a clear escalation path to stop the test if needed.
   • BAllow a DDoS test against the production platform, but only using low-volume traffic that is unlikely to cause disruption.
   • CAllow a limited DDoS test against a staging environment that mirrors the production platform, with a clear escalation path to stop the test if needed.
   • DAllow a DDoS test against the production platform, but only during a scheduled maintenance window.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A penetration tester is planning an engagement for a client that wants to test the security of its internal network. The client has requested that the test be conducted in a way that minimizes the risk of disrupting business operations. Which test phase sequencing is most appropriate to achieve this goal?

   • ASkip passive reconnaissance and go directly to active scanning to speed up the test.
   • BStart with passive reconnaissance, then perform non-intrusive scanning, followed by targeted exploitation of identified vulnerabilities, and finally reporting.
   • CBegin with active exploitation of known vulnerabilities, then scan for additional targets, and compile the report at the end.
   • DPerform scanning and exploitation simultaneously to save time, and report the findings at the end.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   A penetration test is conducted with the client providing full network diagrams, source code, and administrative credentials to the tester. Which type of penetration test does this describe?

   • AWhite-box test
   • BRed-team test
   • CBlack-box test
   • DGray-box test
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A penetration tester is engaged to assess a client's wireless network security. The client has provided the tester with the WPA2-PSK passphrase and has requested a test that focuses on the security of the wireless network's configuration and client isolation. Which tool and technique combination is most appropriate for this task?

   • AUse a wireless auditing tool to capture and analyze traffic, test for weak encryption configurations, and attempt to bypass client isolation.
   • BPerform a brute-force attack against the WPA2-PSK passphrase to test its strength.
   • CUse a network vulnerability scanner to scan the wireless access points for known CVEs.
   • DUse a web application scanner to test the wireless network's management interface.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which section of a penetration test report should contain detailed technical information about each vulnerability, including proof of concept and remediation steps?

   • ATechnical findings
   • BScope and methodology
   • CAppendix
   • DExecutive summary
   Reveal Solution Discussion Select an answer first