D332 Penetration Testing and Vulnerability Analysis - Set 4 - Part 1

Correct Answer:

UTM combines multiple security functions such as firewalls, intrusion detection, vulnerability scanning, and malware protection into one device or solution.

Correct Answer:

OWASP is an open community that focuses on improving the security of software, especially web applications, through testing and publishing security best practices.

Correct Answer:

NIST SP 800-115 is a guide by the National Institute of Standards and Technology (NIST) that provides a methodology for security testing and assessment.

Correct Answer:

OSSTMM is a manual that provides guidelines for testing not just digital security, but also human and physical security elements.

Correct Answer:

ISSAF is an open-source framework that includes templates for conducting penetration testing, vulnerability assessments, and reporting.

Correct Answer:

PTES outlines these seven phases to provide a comprehensive structure for conducting penetration tests.

Correct Answer:

MITRE ATT&CK is a globally accessible knowledge base of adversary tactics, techniques, and procedures that are used in cyberattacks.

Correct Answer:

CVSS is used to assign scores to vulnerabilities to help organizations prioritize remediation efforts.

Correct Answer:

CVE is a system that assigns unique identifiers to specific vulnerabilities, making them easy to reference across different databases.

Correct Answer:

CWE is a database maintained by MITRE that lists common weaknesses in software and hardware, helping developers and security professionals identify potential flaws.

Correct Answer:

The PenTest team needs to know how many forms or pages require interaction and ensure that they test all necessary roles and permissions.

Correct Answer:

These assets must be defined in the test scope to ensure comprehensive testing of both internal and external resources.

Correct Answer:

Internal assets are typically within the organization’s private network, while external assets, like websites and servers, are accessible via the internet.

Correct Answer:

First-party assets are directly managed by the client organization, while third-party hosted assets are managed by external vendors or partners.

Correct Answer:

Open-ended questions remove ambiguity and help ensure that the testing methods align with the client’s expectations and needs.

Correct Answer:

Compliance-based assessments ensure that a company is adhering to legal and regulatory standards like HIPAA, PCI DSS, and GDPR.

Correct Answer:

In red team/blue team assessments, the red team attempts to exploit vulnerabilities, while the blue team works to defend against these attacks.

Correct Answer:

A goals-based assessment focuses on specific objectives, such as testing a point-of-sale system for security issues before implementation.

Correct Answer:

In an unknown environment test, the PenTest team must gather information from scratch, simulating how a real attacker would approach the environment.

Correct Answer:

In partially known environment testing, the team is given some information to help focus on specific vulnerabilities, often related to web applications or software.