Cybersecurity Penetration Testing Quiz

CompTIA PenTest+ (PT0-002) Study Notes

• Intermediate-level certification for technical professionals who conduct penetration testing and vulnerability management across on-premise, cloud, and hybrid environments.
• Recommended prerequisites include intermediate-level security professionals with at least 3-4 years of broad hands-on experience, Security+, and CySA+ certification (though not strictly required).
• The CompTIA Security+ exam knowledge is assumed.
• The exam covers five domains: Planning and Scoping, Information Gathering and Vulnerability Scanning, Attacks and Exploits, Reporting and Communication, and Tools and Code Analysis.
• The exam includes 90 multiple-choice and multiple-select questions and 3-5 performance-based questions (PBQs).
• The exam duration is 165 minutes.
• A passing score is 750 points out of 900 (80-85%).
• Exam vouchers can be purchased at store.comptia.org for regular pricing or at a 10% discount at diontraining.com/vouchers.

Penetration Testing/Vulnerability Assessment Stages

• Planning and scoping
• Reconnaissance
• Scanning
• Enumeration
• Attack
• Exploitation
• Reporting
• Communication

Exam Tips and Tricks

• Closed captions and adjustable playback speed are available.
• Download and print the study guide.
• Join the Dion Training Facebook group (facebook.com/groups/diontraining).
• Email [email protected] if you don't have a Facebook account.
• Be aware of distractors and red herrings.
• Base answers on study materials, not personal experience.
• Choose the answer correct in the majority of situations.
• Focus on understanding the 'why' behind tool usage in tool-based questions.

Planning an Engagement

• A singular penetration testing project, planned and scoped by the requesting client and performing analysts.
• Domain 1: Planning and Scoping
  • Objective 1.1: Compare and contrast governance, risk, and compliance concepts.
  • Objective 1.2: Explain the importance of scoping and organizational/customer requirements.
  • Objective 1.3: Demonstrate an ethical hacking mindset by maintaining professionalism and integrity, given a scenario.
• Penetration Tester
  • An authorized threat actor who tries to identify how unauthorized intruders could damage a network.
• Risk: The probability that a threat will be realized.
  • Cybersecurity Analyst: Minimizes vulnerabilities
  • Penetration Tester: Finds and exploits vulnerabilities
• Vulnerability: Any weakness in the system design or implementation.
• Threat: Anything that could cause harm, loss, damage, or compromise to information technology systems.
• Risk Management: Finds ways to minimize the likelihood of a certain outcome, from occurring and to achieve desired outcomes.
  • Risk Types: Inherent Risk, Residual Risk, Risk Exception
  • Risk Handling: Risk Avoidance, Risk Mitigation, Risk Acceptance, Risk Transfer
• Controls: Categories: Compensative, Used in primary access control measures in order to mitigate a given risk, Example: Dual control

Corrective, Detective, Deterrent, Directive and Preventive Controls

• Corrective: Reduces the effect of an undesirable event or attack.
• Detective: Detects ongoing attacks and notifies the right personnel.
• Deterrent: Discourages security policy violations.
• Directive: Forces compliance with security policies and practices within organizations.
• Preventive: Prevents or stops attacks from occurring.
• Recovery: Recovers lost data, systems, and functionality after an attack.

Legal Concepts

• Written Permission: Prevents a penetration tester from going to prison. (Essential for ethical hacking operations)
• Written Permission Information: Includes authorized names, test inclusions, authorization validity, data handling requirements, reporting guidelines, and termination guidelines.
• Statement of Work (SOW): A formal document outlining tasks and deliverables, with clear specifications for the engagement.
• Master Service Agreement (MSA): Special contract to govern future transactions.
• Service-Level Agreement(SLA): A detailed agreement between the service provider (penetration tester) and the client regarding the security service being provided.

Risk Management

• Inherent Risk: Occurs when a risk is discovered, but no mitigation methods have been applied.
• Residual Risk: Calculated risk after applying mitigation methods and security controls.
• Risk Exception: Risk created by exemption from corporate policy compliance.

NIST Special Publication 800-115

• Technical Guide to Information Security Testing and Assessment.
• Mimics tactics, techniques, and procedures (TTPs) used by an actual attacker

MITRE ATT&CK Framework

• A knowledge base of adversary tactics, techniques, and procedures (TTPs) in real-world attacks.

Penetration Standards

• Open Web Application Security Project (OWASP): Community-led group for securing the web.
• OWASP Top 10: Standard awareness document for developers and web application security.
• Open-Source Security Testing Methodology Manual (OSSTMM): A methodology for security testing.

Penetration Testing Execution Standard (PTES)

• A common language and scope for performing penetration tests.

Information Systems Security Assessment Framework (ISSAF)

• A comprehensive guide used in penetration testing.