A penetration tester is planning an engagement. The client has stated that the goal is to test the effectiveness of their security awareness training. The tester has been given permission to use social engineering but must not cause any actual system damage. Which attack plan best aligns with the client's objective and constraints?

Scanning for and exploiting a known vulnerability in a public-facing web server

Performing a denial-of-service (DoS) attack on the company's email server to test availability

Sending a simulated phishing email to employees and tracking who clicks the link

Attempting to gain physical access to the server room by tailgating an employee

A security engineer is reviewing the company's defenses against a potential attack. The engineer knows that an attacker has successfully gained access to a low-privilege user account. Which of the following actions is the attacker most likely to take next, based on a typical attack planning methodology?

Immediately exfiltrate the most sensitive data from the database

Disable all security software on the compromised host

Delete all system logs to cover their tracks

Perform internal reconnaissance to map the network and identify high-value targets

During a red team exercise, the team first scans the target's public IP range for open ports, then uses a vulnerability scanner to identify outdated software versions, and finally crafts a custom phishing email to deliver a payload to a user who works with the outdated software. This sequence of actions best illustrates which aspect of the attacker's approach?

Opportunistic exploitation of a single weakness

Random trial-and-error without a defined goal

Reactive response to a discovered vulnerability

Methodical planning from reconnaissance to exploitation

Certified Tester Security Tester

Domain 6Objective 2

Understanding the Attacker Mentality CT-SEC Practice Questions (Page 5)

Part of the Human Factors in Security Testing domain, which makes up ~14% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 21–25

21expert · hard
A penetration tester is planning an engagement. The client has stated that the goal is to test the effectiveness of their security awareness training. The tester has been given permission to use social engineering but must not cause any actual system damage. Which attack plan best aligns with the client's objective and constraints?
Select an answer first
22application · medium
A security engineer is reviewing the company's defenses against a potential attack. The engineer knows that an attacker has successfully gained access to a low-privilege user account. Which of the following actions is the attacker most likely to take next, based on a typical attack planning methodology?
Select an answer first
23foundation · easy
An attacker infiltrates a company's network to steal trade secrets and sell them to a competitor. What is the primary motivation?
Select an answer first
24application · medium
During a red team exercise, the team first scans the target's public IP range for open ports, then uses a vulnerability scanner to identify outdated software versions, and finally crafts a custom phishing email to deliver a payload to a user who works with the outdated software. This sequence of actions best illustrates which aspect of the attacker's approach?
Select an answer first
25foundation · easy
What is the primary target of a phishing attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

Understanding the Attacker Mentality CT-SEC Practice Questions (Page 5)

Questions 21–25

An attacker infiltrates a company's network to steal trade secrets and sell them to a competitor. What is the primary motivation?

What is the primary target of a phishing attack?

Keep studying — Human Factors in Security Testing