What are the steps of the Penetration Testing process?

Planning, Discovering, Attacking, Reporting

Network Reconnaissance involves

Passive and Active Reconnaissance

A Vulnerability Assessment

Looking at your network and assessing its vulnerabilities

studbud

SEC+ Ch 01 Mod c

11 termsStudBud Administration282 plays

Slides 44 - 53 (Plus the supplemental)

Flashcards11 cardsFPractice quizPHost liveL

Questions 11

Answers

1
Which of the following is not part of the vulnerability assessment?
Reviewing the network design
Determining attack surface
Online research
Performing a baseline review
2
Which of the following best categorizes the different types of vulnerability scans?
Subjective and Objective
Invasive and Non-invasive
Intrusive and Non-intrusive
Fun and Profit
3
When it comes to penetrating networks, performing recon on internal networks is part of
Passive Reconnaissance
Establish Persistence
Pivot
Privilege Escalation
4
What are the steps of the Penetration Testing process?
Planning, Discovering, Attacking, Reporting
Planning, Attacking, Discovering, Reporting
Attacking, Reporting, Planning, Discovering
Planning, Attacking, Attacking again, Reporting
5
Which of the following are true about penetration tests?
B
A
D
C
6
Network Reconnaissance involves
Local and Remote Reconnaissance
Passive and Active Reconnaissance
Here and There Reconnaissance
Intrusive and Non-intrusive Reconnaissance
7
Which of the following is considered an automated security tool?
Patch Management Software
Risk Mitigation
Baseline Review
Change Management
8
When it comes to penetrating networks, creating alternate accounts is part of
Establish Persistence
Privilege Escalation
System Administration
Pivot
9
When penetrating networks, gathering user names and password hashes is part of
Establishing Persistence
Privilege Escalation
The fun
Pivoting
10
Avoidance, Transference, and Mitigation are examples of
Risk Management
Mitigation Techniques
Automated Security Tools
Risk Assessment
11
A Vulnerability Assessment
Looking at your network and assessing its vulnerabilities
Finding reasons to spend money on cyber security tools
Hacking the network to find its vulnerabilities
Is a tool to see how awesome your network is

SEC+ Ch 01 Mod c Flashcards | StudBud