D332 Penetration Testing and Vulnerability Analysis - Set 1 - Part 1

Correct Answer:

Risk is calculated as the product of the threat and the vulnerability, indicating the potential impact of a vulnerability being exploited.

Correct Answer:

UTM appliances combine functions like firewall, malware scanning, intrusion detection, and more, offering a comprehensive security solution.

Correct Answer:

OWASP is a project that publishes a top-ten list of vulnerabilities and provides frameworks for testing web applications during development.

Correct Answer:

NIST is the U.S. National Institute of Standards and Technology, which develops security standards used in federal agencies and shares cybersecurity best practices.

Correct Answer:

NIST SP 800-115 provides guidance on conducting information security assessments, including penetration testing.

Correct Answer:

OSSTMM (Open-source Security Testing Methodology Manual) outlines all areas requiring testing in an organization, including human and physical security.

Correct Answer:

ISSAF (Information Systems Security Assessment Framework) provides a structured approach to security assessments, including contract templates and reporting guidelines.

Correct Answer:

PTES (Penetration Testing Execution Standard) outlines a methodology for conducting penetration tests, covering stages like pre-engagement and vulnerability analysis.

Correct Answer:

MITRE ATT&CK is a framework that documents adversary tactics, techniques, and procedures (TTPs), helping organizations understand potential attack vectors.

Correct Answer:

CVSS (Common Vulnerability Scoring System) is used to quantify the severity of vulnerabilities, aiding in prioritizing remediation efforts.

Correct Answer:

CVE (Common Vulnerabilities and Exposures) provides a standardized format for naming and documenting specific vulnerabilities in software and hardware.

Correct Answer:

CWE (Common Weakness Enumeration) is a database maintained by MITRE that lists hardware and software weaknesses, helping developers improve security.

Correct Answer:

Testing should cover multiple roles, such as user and admin, to ensure all levels of access are secure.

Correct Answer:

Assets include technical elements like IPs, domains, and APIs that must be included in the scope of a penetration test.

Correct Answer:

Internal assets are typically accessed by employees, while external assets (e.g., websites, DNS) are exposed to the internet and vulnerable to external threats.

Correct Answer:

First-party hosted assets are under the direct control of the client, while third-party hosted assets are managed by external vendors or partners.

Correct Answer:

Open-ended questions help remove ambiguity, ensuring both the PenTest team and stakeholders are aligned on the methods and goals.

Correct Answer:

Compliance-based assessments focus on meeting specific laws or standards, such as GDPR or PCI DSS, to ensure the organization complies with regulations.

Correct Answer:

In red team/blue team assessments, the red team simulates attacks while the blue team focuses on defending the network.

Correct Answer:

Goals-based assessments are purpose-driven, targeting specific business objectives, like testing security before launching a new system.