Ethical Hacking and Penetration Testing

An ethical hacker's primary goal is to:

Which threat actor is MOST likely to utilize zero-day exploits and advanced persistent threat (APT) techniques?

A group claims responsibility for leaking sensitive corporate emails in response to a company's controversial environmental policy. This is MOST characteristic of:

Which of the following BEST exemplifies a state-sponsored cyberattack?

An employee uses their authorized access to a company database to steal customer information and sell it on the dark web. This scenario BEST describes:

An application-based penetration test is designed to identify:

When performing a network infrastructure penetration test, which two assets are MOST critical to evaluate?

During an application-based penetration test focusing on a web application, what is the PRIMARY reason to also assess access controls to back-end databases?

What is the PRIMARY motivation for companies to implement bug bounty programs?

In a partially known environment penetration test, which of the following is MOST likely?

What is the defining characteristic of a known environment penetration test?

A penetration test where the tester receives only domain names and IP addresses of the target organization is BEST described as:

Match the penetration testing methodology to the description:

• MITRE ATT&CK
• NIST SP 800-115
• PTES
• OWASP WSTG
• OSSTMM

provides information about types of attacks and methods

Match the penetration testing methodology to the description:

• MITRE ATT&CK
• NIST SP 800-115
• PTES
• OWASP WSTG
• OSSTMM

Covers the high-level phases of web application security testing

Match the penetration testing methodology to the description:

• MITRE ATT&CK
• NIST SP 800-115
• PTES
• OWASP WSTG
• OSSTMM

lays out repeatable and consistent security testing

Match the penetration testing methodology to the description:

• MITRE ATT&CK
• NIST SP 800-115
• PTES
• OWASP WSTG
• OSSTMM

collection of different matrices of tactics and techniques that adversaries use while preparing for an attack

Match the penetration testing methodology to the description:

• MITRE ATT&CK
• NIST SP 800-115
• PTES
• OWASP WSTG
• OSSTMM

provides organizations with guidelines on planning and conducting information security testing

Which THREE of the following are phases within the Penetration Testing Execution Standard (PTES)?

Which TWO options represent distinct phases within the Information Systems Security Assessment Framework (ISSAF)?

Which TWO selections accurately reflect phases encompassed by the Open Source Security Testing Methodology Manual (OSSTMM)?

Which penetration testing methodology serves as a comprehensive guide specifically tailored for web application testing?

Which Kali Linux alternative is geared towards penetration testing and digital forensics?

Which URL provides an environment convenient for learning about pen testing methodologies?

Why is 'Health Monitoring' a crucial requirement when setting up a penetration testing lab environment?

During a network infrastructure penetration test, what type of tool would be MOST helpful?

What is the MOST suitable type of tool for performing an application-based penetration test?

Which category of tools is MOST crucial when conducting a wireless infrastructure penetration test?

What kind of tools are MOST effective for evaluating the security of server and client platforms?

In scenarios where a system CANNOT be virtualized for penetration testing, what represents the MOST prudent course of action?