stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Penetration Testing Flashcards | StudBud
Explore
/
Penetration Testing
What classifys a test as a white box test?
What is a bug bounty?
Penetration Testing
15 terms
·
StudBud Administration
·
46 plays
Chapter 11 TestOut
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
What is a bug bounty?
Detailed documentation of what a test will do.
Where someone can earn money for reporting bugs to companies that allow.
A large amount of bugs and issues that a pen tester finds on a network
A document that defines how the test will be conducted.
2
What classifys a test as a white box test?
The ethical hacker has full knowledge of the target and/or network
The ethical hacker has some knowledge of the target and/or network
The ethical hacker has zero knowledge of the target or network
3
How many teams are in a normal penetration test environment?
7
8
6
3
4
The purple team is the defending team. Their responsibility is to defend the network against the attackers.
False
True
5
The purpose of a penetration test is to detect vulnerabilities in a network.
False
True
6
The 3rd phase of penetration testing is the post-attack phase.
False
True
7
What is the first phase of a penetration test?
Attack Phase
Pre-Attack Phase
Planning Phase
Post-Attack Phase
8
What is a risk of penetration testing?
It might slow some company operations down
Testing is expensive
9
The scope of work defines how the penetration test will be conducted.
False
True
10
Which of the following is a way to conduct penetration testing?
Purple Box
Blue Box
Grey Box
Red Box
11
Is pen testing used for helping or damaging systems?
Helping
Damaging
12
The red team is the...
Data collectors and analysts
Defense of the network
The offense of a pen test
13
What operating system is best for penetration testing?
Red Hat
BackTrack
Google Chrome OS
Windows
14
A penetration test should focus on what type of scenario?
Neither
Most Likely
Most Dangerous
Both
15
What is wireless penetration testing?
An assessment of an organization's software and cloud-based infrastructure.
An assessment that exposes code flaws in websites and applications.
A review of the network build and configuration
A test that targets the WLAN and wireless protocols.
