Wireshark Network Monitoring Tool

What technique does Hashcat use to crack passwords?

Brute force

Which tool is commonly used for network security assessment?

Nmap

What can Nmap help penetration testers identify?

Exploitable vulnerabilities in websites

Which operating systems are supported by Nmap?

Linux, Windows, Solaris Signup and view all the answers

What can penetration testers use Nmap for?

Discovering network assets Signup and view all the answers

Which tool is used for automated application vulnerability assessment?

Invicti Signup and view all the answers

How does Invicti find vulnerabilities in web assets?

Chrome-based crawler Signup and view all the answers

What is the primary purpose of penetration testing?

To simulate attacks and identify weak spots in system defenses Signup and view all the answers

What type of websites can Invicti scan for vulnerabilities?

'Dynamic web applications, HTML5 websites' Signup and view all the answers

Why are pen tests usually performed by outside contractors?

To expose blind spots missed by the system developers Signup and view all the answers

What term is often used to describe contractors who perform penetration testing?

Ethical hackers Signup and view all the answers

Why is it beneficial to have pen tests performed by individuals with little-to-no prior knowledge of the system's security?

To identify blind spots missed by developers Signup and view all the answers

What qualification do many ethical hackers performing pen tests possess?

Certification for pen testing Signup and view all the answers

Why might some of the best ethical hackers be reformed criminal hackers?

To help fix security flaws instead of exploiting them Signup and view all the answers

What is the main difference between an open-box pen test and a closed-box pen test?

The amount of background information provided to the hacker Signup and view all the answers

What distinguishes a covert pen test from other types of pen tests?

The level of awareness within the target company regarding the test Signup and view all the answers

During which phase of a pen test does an ethical hacker gather data and information for planning the attack?

Reconnaissance phase Signup and view all the answers

What distinguishes an external pen test from an internal pen test?

The location of the attack Signup and view all the answers

Which technique might an ethical hacker use to gain remote access to a network during a pen test?

Using hardware devices to provide remote access Signup and view all the answers

In a closed-box pen test, what information is typically provided to the hacker?

'Single-blind' in nature Signup and view all the answers