Cyber Threat Intelligence Week 9- Risk Management and Security Assessments

Question 1

Q15- For which type of tests is OWASP ZAP commonly used?

Accepted Answer

System vulnerability assessment testing, Web application security testing

Question 2

Q3-What is the difference between White Box Testing and Gray Box Testing?

Accepted Answer

White Box Testing requires access to source code.

Question 3

Q9-In which situations does Vulnerable Test Assessment require an intrusive approach?

Accepted Answer

To scan the system without user permission, To bypass system access restrictions

Question 4

Q7-When is Black Box Testing ideal?

Accepted Answer

When the system's source code is unknown

Question 5

Q14-When is Gray Box Testing preferred?

Accepted Answer

When all source code of the system is available, To understand both internal and external threats

Question 6

Q12- Which of the following tools is incorrectly matched with its typical use case?

Accepted Answer

Metasploit - Automated malware analysis

Question 7

Q6-What do Likelihood and Impact represent in Risk Assessment?

Accepted Answer

Which tools are required to analyze the risk, The probability of the risk occurring and its potential consequences

Question 8

Q21- How do Security Assessments differ from Risk Management processes?

Accepted Answer

Focuses on vulnerabilities, while Risk Management focuses on likelihood and

Question 9

Q22- What is the primary goal of the Execution Phase in a penetration test?

Accepted Answer

Performing real attacks on identified weaknesses

Question 10

Q20- What is the advantage of starting with Risk Assessment in the early stages of system development?

Accepted Answer

It minimizes manual testing later., It ensures no intrusive methods are needed., It identifies external threats early., It helps establish a baseline for vulnerabilities.

Question 11

Q10-What is the primary difference between Penetration Testing and Risk Assessment?

Accepted Answer

Risk Assessment takes a more quantitative approach.

Question 12

Q19-Use of industry standards like ISO 27001?

Accepted Answer

To eliminate the need for external tools

Question 13

Q18-Who typically conducts internal security assessments?

Accepted Answer

In-house security teams

Question 14

Q11- Which of the following activities takes place during the Planning Phase of a penetration test?

Accepted Answer

Gathering IP addresses and defining test scope

Question 15

Q8-Why is credential-based testing crucial?

Accepted Answer

To verify that only authorized users can access the system

Question 16

Q16-Which method in Risk Assessment does NOT require a manual approach?

Accepted Answer

Source code analysis, CVSS scoring

Question 17

Q4-Which tool is most commonly used for Penetration Testing?

Accepted Answer

Burp Suite

Question 18

Q2-Which of the following information is NOT typically required for Black Box Testing?

Accepted Answer

Source code of the system, System architecture details

Question 19

Q13-What is one advantage of White Box Testing?

Accepted Answer

High likelihood of finding all vulnerabilities through detailed analysis

Question 20

Q17-Which of the following tools is used for security scanning ?

Accepted Answer

Sublime Text, Nessus

Question 21

Q5-Which tools aid in Risk Management?

Accepted Answer

CVSS and Likelihood Matrix

Cyber Threat Intelligence Week 9- Risk Management and Security Assessments

Questions 21

Cyber Threat Intelligence Week 9- Risk Management and Security Assessments

Questions 21