D332 Penetration Testing and Vulnerability Analysis - Set 5 - Part 1

Correct Answer:

Risk is calculated as the product of the threat and the vulnerability, illustrating the potential for harm in a given context.

Correct Answer:

UTM devices combine functions like firewalls, intrusion detection, malware scanning, and data loss prevention into a single solution.

Correct Answer:

OWASP provides tools, resources, and methodologies for testing web applications and publishes the OWASP Top Ten list of common vulnerabilities.

Correct Answer:

NIST develops computer security standards for U.S. federal agencies and provides cybersecurity best practice guidelines.

Correct Answer:

NIST SP 800-115 is a guide developed by NIST that provides recommendations and best practices for information security testing and vulnerability assessments.

Correct Answer:

OSSTMM is a framework for conducting penetration tests and security audits, covering areas such as physical and human security as well as technical security.

Correct Answer:

ISSAF (Information Systems Security Assessment Framework) is an open-source framework that includes tools and templates for conducting penetration tests and security assessments.

Correct Answer:

PTES is a framework that provides guidance on how to conduct a thorough penetration test, covering areas such as threat modeling and exploitation.

Correct Answer:

MITRE ATT&CK is a framework that describes adversary tactics, techniques, and procedures (TTPs) used in cyberattacks, helping organizations understand and mitigate threats.

Correct Answer:

CVSS (Common Vulnerability Scoring System) is a standardized system used to assess the severity of software vulnerabilities, helping organizations prioritize risk.

Correct Answer:

CVE (Common Vulnerabilities and Exposures) refers to a standardized identifier assigned to a specific vulnerability, helping to track and communicate about security issues.

Correct Answer:

CWE (Common Weakness Enumeration) is a catalog of known software and hardware weaknesses, helping developers and security professionals mitigate vulnerabilities.

Correct Answer:

Penetration testing of web applications is conducted to find vulnerabilities that could allow attackers to gain unauthorized access or cause harm to the system.

Correct Answer:

External assets are those that are accessible from outside the organization, such as a public website or DNS server, and are typically more vulnerable to external threats.

Correct Answer:

Internal assets are resources that can only be accessed from within the organization, while external assets are those that are publicly accessible, like websites or email servers.

Correct Answer:

Testing internal assets involves simulating attacks that could be carried out by insiders or external hackers who have gained access to the organization’s network.

Correct Answer:

It’s crucial for the PenTest team to understand what level of access and permissions will be provided during the testing, as this can impact the scope and focus of the test.

Correct Answer:

Compliance-based assessments are conducted to ensure that an organization meets the security requirements set by laws or standards such as GDPR, HIPAA, or PCI DSS.

Correct Answer:

Red team/blue team assessments simulate real-world attacks, where the red team tries to breach the system, and the blue team defends it.

Correct Answer:

Goals-based assessments focus on achieving specific objectives, like evaluating the security of a new system before it goes live.