4.3 Penetration Testing

Question 1

What is penetration testing?

Answer 1

A process where we simulate an attack on our own systems.

Question 2

How does penetration testing differ from vulnerability scanning?

Answer 2

Penetration testing involves performing actual exploits to see if access can be gained.

Question 3

Why do some organizations perform standardized penetration testing?

Answer 3

It is a good security best practice and may be mandated by the type of business.

Question 4

What document does NIST provide for an overview of the pen testing process?

Answer 4

The Technical Guide to Information Security Testing and Assessment.

Question 5

What are the rules of engagement in penetration testing?

Answer 5

A formal list of rules that defines the scope and purpose of the testing.

Question 6

What might the rules of engagement specify regarding penetration testing timing?

Answer 6

They may define appropriate hours for testing, such as after 6:00 PM local time.

Question 7

What types of penetration tests can be performed?

Answer 7

On-site physical breaches, internal penetration tests, and external tests.

Question 8

What is the significance of documenting sensitive information handling in penetration testing?

Answer 8

It ensures proper management of sensitive data uncovered during testing.

Question 9

What should be defined in the rules of engagement regarding systems?

Answer 9

Which systems are in scope for testing and which are out of scope.

Question 10

What is the primary objective of performing a penetration test?

Answer 10

To exploit known vulnerabilities to gain access to a system.

Question 11

What risks are associated with exploiting vulnerabilities during penetration testing?

Answer 11

The process could cause the system or service to fail.

Question 12

What are some common methods used during penetration testing?

Answer 12

• Buffer overflows * Password brute force attacks * Social engineering * Database injections

Question 13

What is a backdoor in the context of penetration testing?

Answer 13

A method to gain access to a system again without using the same vulnerability.

Question 14

What role does a pivot point play after gaining initial access during a penetration test?

Answer 14

It allows lateral movement to gain access to other systems within the network.

Question 15

What is the common practice after identifying a vulnerability?

Answer 15

Reporting it to the software developer for a patch to be created.

Question 16

What is a CVE?

Answer 16

A list of publicly disclosed vulnerabilities.

Question 17

What is the purpose of bug bounties?

Answer 17

To reward individuals for finding vulnerabilities in software.

Question 18

What happens after a researcher identifies a vulnerability?

Answer 18

The software developer creates a fix and makes it public.

Question 19

Fill in the blank: The process of identifying a vulnerability to the time a patch is available can take _______.

Answer 19

weeks or even months.

Question 20

True or False: Penetration testing should always be conducted during business hours.

Answer 20

False.