Q. What is a common security exception for known environment tests?

View solution

Q. What does certificate pinning associate a host with?

View solution

Q. What role does access to user accounts and privileged accounts play in penetration tests?

View solution

Q. What is one of the most powerful tools a penetration tester can have?

View solution

Q. Why is network access important for penetration testers?

View solution

Q. What determines the budget required for a penetration test?

View solution

Q. For external or commercial testers, what might the budget for a penetration test include?

View solution

Q. Which framework provides a knowledgebase of adversary tactics and techniques, including details of mitigations, threat actor groups, and software?

View solution

Q. What does the Open Web Application Security Project (OWASP) provide guides for?

View solution

Q. Which penetration testing standard covers pre-engagement interactions, scoping, and details such as dealing with third parties?

View solution

Q. What does the MITRE ATT&CK Framework stand for?

View solution

Q. What should be considered when using dated penetration testing standards?

View solution

Q. Which penetration testing methodology guide covers analysis, metrics, workflows, human security, physical security, and wireless security but has not been updated since 2010?

View solution

Q. Which organization provides standards that include penetration testing as part of NIST special publication 800-115?

View solution

Q. What is the last update year for the Information Systems Security Assessment Framework (ISSAF)?

View solution

Q. What should modern penetration testers be aware of regarding the ISSAF?

View solution

Q. What is suggested for organizations and individual penetration testers regarding standards and techniques?

View solution

Q. What legal documents are important for penetration testers to understand before starting a penetration test?

View solution

Q. What is a document that defines the purpose of the work, what work will be done, what deliverables will be created, the timeline for the work, the price for the work, and any additional terms and conditions for a penetration test?

View solution

Q. What legal document helps enforce confidential relationships between two parties, outlining the parties, what information is considered confidential, how long the agreement lasts, when and how disclosure is acceptable, and how confidential information should be handled?

View solution