Penetration Testing

Question 1

How does a vulnerability scan differ from a penetration test?

Answer 1

Pen tests seek vulnerabilities from the outside looking in and vulnerability scans look at them from the inside looking out.

Question 2

What are the 5 steps of a penetration test?

Answer 2

1. Get permission and document information about the target network
2. Conduct reconnaissance
3. Size up the targets to find known vulnerabilities
4. Exploit the targets
5. Document the results

Question 3

Why do attackers want to pivot to another workstation or user account?

Answer 3

It helps them to establish persistence and maintain their foothold inside the network.

Question 4

Define a penetration test

Answer 4

A test that uses active tools and security tools to simulate an attack and evaluate security.