Q. How do physical controls contribute to security in a penetration test?

View solution

Q. What risk might an organization address by implementing an employee awareness campaign, a new business process for wire transfers, and email content filtering simultaneously?

View solution

Q. How can organizations remediate the vulnerability of weak password complexity?

View solution

Q. What is the disadvantage of storing passwords in plaintext on a server?

View solution

Q. Why is the risk of storing passwords in plaintext significant, even after a system has been compromised?

View solution

Q. What is the recommended solution for preventing passwords stored on a server from being easily accessible to attackers?

View solution

Q. Why might the reliance on passwords pose a serious security risk?

View solution

Q. What is multifactor authentication?

View solution

Q. Which category of multifactor authentication involves physical objects as authentication mechanisms?

View solution

Q. What qualifies as multifactor authentication?

View solution

Q. What is one of the most common findings in penetration test reports?

View solution

Q. According to CompTIA, what are the two techniques for remediating SQL injection vulnerabilities?

View solution

Q. Why do unnecessary open services pose a security risk?

View solution

Q. What is the recommended solution for addressing unnecessary open services?

View solution

Q. Why is the executive summary considered the most important section of a penetration testing report?

View solution

Q. Who is the target audience for the executive summary in a penetration testing report?

View solution

Q. When is it recommended to write the executive summary in the penetration testing report?

View solution

Q. What is the purpose of the "Scope Details" section in a penetration testing report?

View solution

Q. Who is the audience for the "Methodology and Scope Details" section of a penetration testing report?

View solution

Q. What is the recommended approach if detailed code listings, scan reports, or other tedious results are necessary in the methodology section?

View solution