Penetration Testing 5.5

Question 1

Physical Penetration Test

Answer 1

• Circumventing the operating system security through physical means.
• Assessing and testing the physical security of an organization.

Question 2

Red Team

Answer 2

• Tests the vulnerabilities of a system.
• Attacks the system.

Question 3

Blue Team

Answer 3

• Identifies attack in real time.
• Prevent any unauthorized access.

Question 4

Partially Known Environments

Answer 4

• A mix of known and unknown
• Focuses on certain systems or applications.

Question 5

Unknown Environment

Answer 5

• The pentester knows nothing about the systems under attack.
• Considered a “blind” test.

Question 6

Reconnaissance

Answer 6

• Need information before the attack.
• Gathering a digital footprint
• Understand the security posture.
• Minimize the attack area.
• Create a network map.

Question 7

Passive Reconnaissance

Answer 7

• Learn as much as you can about the organization and system through an open source.

Question 8

Sources for Passive Reconnaissance

Answer 8

• Social Media
• Corporate web site
• Online forums such as Reddit
• Dumpster diving
• Reaching out to the third party extensions.

Question 9

Active Reconnaissance

Answer 9

• Attacker engages with the system directly.
• Typically conducting a port scan to find any open ports.
• Usually involves packets that can be traced.