Ch 8 Penetration Testing

Question 1

A pen test in which the tester has a limited access to information on the internal workings of the targeted system:

Accepted Answer

Gray-box testing

Question 2

In cybersecurity exercises, the defending team is referred to as:

Accepted Answer

Blue team

Question 3

In cybersecurity exercises, the role of an event overseer (i.e. the referee) is delegated to:

Accepted Answer

White team

Question 4

In cybersecurity exercises, red team takes on the role of:

Accepted Answer

An attacker

Question 5

An optimal Wireless Access Point (WAP) antenna placement provides a countermeasure against:

Accepted Answer

War driving

Question 6

Which of the following statements does not apply to the concept of OSINT?

Accepted Answer

Active reconnaissance in penetration testing

Question 7

A penetration test done by an authorized person with the full knowledge on how the system that is to be tested works:

Accepted Answer

White-box testing

Question 8

A pen test of a system performed without the knowledge on how the system that is to be tested works is a black-box test

Accepted Answer

True

Question 9

A way of physically marking open wireless networks in the area.

Accepted Answer

War chalking

Question 10

Penetration testing does all except:

Accepted Answer

Passively tests security controls

Questions 10