Q. Why is reprioritizing the goals of a penetration test considered acceptable?

View solution

Q. What is emphasized regarding reprioritization in the world of penetration testing?

View solution

Q. What is the primary objective of recommending mitigation strategies in a penetration test?

View solution

Q. Why are penetration testers uniquely suited to recommend ways to remediate discovered flaws?

View solution

Q. In the context of penetration testing, what do technical controls primarily provide defense against?

View solution

Q. What is an example of an administrative control?

View solution

Q. How do physical controls contribute to security in a penetration test?

View solution

Q. What risk might an organization address by implementing an employee awareness campaign, a new business process for wire transfers, and email content filtering simultaneously?

View solution

Q. How can organizations remediate the vulnerability of weak password complexity?

View solution

Q. What is the disadvantage of storing passwords in plaintext on a server?

View solution

Q. Why is the risk of storing passwords in plaintext significant, even after a system has been compromised?

View solution

Q. What is the recommended solution for preventing passwords stored on a server from being easily accessible to attackers?

View solution

Q. Why might the reliance on passwords pose a serious security risk?

View solution

Q. What is multifactor authentication?

View solution

Q. Which category of multifactor authentication involves physical objects as authentication mechanisms?

View solution

Q. What qualifies as multifactor authentication?

View solution

Q. What is one of the most common findings in penetration test reports?

View solution

Q. According to CompTIA, what are the two techniques for remediating SQL injection vulnerabilities?

View solution

Q. Why do unnecessary open services pose a security risk?

View solution

Q. What is the recommended solution for addressing unnecessary open services?

View solution