Welcome to the Planning and Scoping Penetration Tests MCQs Page

Dive deep into the fascinating world of Planning and Scoping Penetration Tests with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Planning and Scoping Penetration Tests, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Planning and Scoping Penetration Tests, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Planning and Scoping Penetration Tests. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Planning and Scoping Penetration Tests. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Planning and Scoping Penetration Tests MCQs | Page 12 of 12

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Information Gathering 🔒

03

Vulnerability Scanning 🔒

04

Analyzing Vulnerability Scans

05

Exploiting and Pivoting 🔒

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q111.

During a penetration test specifically scoped to a single web application, Chris discovers that the web server also contains a list of passwords to other servers at the target location. After he notifies the client, they ask him to use them to validate those servers, and he proceeds to test those passwords against the other servers. What has occurred?

Malfeasance

Known environment testing

Scope creep

Target contraction

Discuss

Answer: (c).Scope creep Explanation:Scope creep occurs when additional items are added to the scope of an assessment. Chris has gone beyond the scope of the initial assessment agreement. This can be expensive for clients or may cost Chris income if the additional time and effort are not accounted for in an addendum to his existing contract.

Q112.

Lucas has been hired to conduct a penetration test of an organization that processes credit cards. His work will follow the recommendations of the PCI DSS. What type of assessment is Lucas conducting?

An objectives-based assessment

A red-team assessment

A black-team assessment

A compliance-based assessment

Discuss

Answer: (d).A compliance-based assessment Explanation:The PCI DSS standard is an industry standard for compliance for credit card processing organizations. Thus, Lucas is conducting a compliance-based assessment.

Q113.

The penetration testing agreement document that Greg asks his clients to sign includes a statement that the assessment is valid only at the point in time at which it occurs. Why does he include this language?

His testing may create changes.

The environment is unlikely to be the same in the future.

Attackers may use the same flaws to change the environment.

The test will not be fully comprehensive.

Discuss

Answer: (b).The environment is unlikely to be the same in the future. Explanation:Assessments are valid only when they occur. Systems change due to patches, user changes, and configuration changes on a constant basis. Greg’s point-in-time validity statement is a key element in penetration testing engagement contracts.

Q114.

The company that Ian is performing a penetration test for uses a wired network for their secure systems and does not connect it to their wireless network. What environmental consideration should Ian note if he is conducting a partial knowledge penetration test?

He needs to know the IP ranges in use for the secure network.

He needs to know the SSIDs of any wireless networks.

Physical access to the network may be required.

Physical access to a nearby building may be required.

Discuss

Answer: (c).Physical access to the network may be required. Explanation:Access to a wired network can require physical access, which could be provided as part of a partial knowledge penetration test. In an unknown environment test, Ian might have to identify a way to compromise a system connected to the network remotely or to gain physical access to the building where the systems are. Knowing the IP ranges or the SSIDs of wireless networks is not required for this type of test. IP ranges can be determined once he is connected, and the test specifically notes that wired networks are not connected.

Q115.

Megan wants to gather data from a service that provides data to an application. What type of documentation should she look for from the application’s vendor?

Database credentials

System passwords

API documentation

Network configuration settings

Discuss

Answer: (c).API documentation Explanation:Megan should look for API documentation. If the application uses an API, she may be able to use default API credentials or methods to gather data. The problem does not mention a database, and system passwords and network configuration settings are not as useful here.

Q116.

Charles has completed the scoping exercise for his penetration test and has signed the agreement with his client. Whose signature should be expected as the counter signature?

The information security officer

The project sponsor

The proper signing authority

An administrative assistant

Discuss

Answer: (c).The proper signing authority Explanation:While the ISO or the sponsor may be the proper signing authority, it is important that Charles verifies that the person who signs actually is the organization’s proper signing authority. That means this person must have the authority to commit the organization to a penetration test. Unfortunately, it isn’t a legal term, so Charles may have to do some homework with his project sponsor to ensure that this happens correctly.

Q117.

Elaine wants to ensure that the limitations of her red-team penetration test are fully explained. Which of the following are valid disclaimers for her agreement?

Risk tolerance

Point-in-time

Comprehensiveness

Both b and c

Discuss

Answer: (d).Both b and c Explanation:Both the comprehensiveness of the test and the limitation that it is only relevant at the point in time it is conducted are appropriate disclaimers for Elaine to include. The risk and impact tolerance of the organization being assessed should be used to define the scope and rules of engagement for the assessment.

Q118.

Jen wants to conduct a penetration test and includes mobile application testing. Which standard or methodology is most likely to be useful for her efforts?

NIST

OWASP

KALI

ISSAF

Discuss

Answer: (b).OWASP Explanation:The Open Web Application Standards Project provides mobile application testing guidelines as part of their documentation, making it the best option on this list for Jen. NIST provides high-level guidance about what tests should include, KALI is a security-focused Linux distribution, and ISSAF is a dated penetration testing standard.

Q119.

What type of assessment most closely simulates an actual attacker’s efforts?

A red-team assessment with a zero knowledge strategy

A goals-based assessment with a full knowledge strategy

A red-team assessment with a full knowledge strategy

A compliance-based assessment with a zero knowledge strategy

Discuss

Answer: (a).A red-team assessment with a zero knowledge strategy Explanation:A red-team assessment with zero knowledge will attempt a penetration test as though they were actual attackers who do not have prior or insider knowledge of the organization. Full knowledge assessments provide more knowledge than attackers can be expected to have, and goals-based assessments target specific systems or elements of an organization rather than the broader potential attack surface that actual attackers may target.

Page 12 of 12

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Planning and Scoping Penetration Tests MCQs Page

Planning and Scoping Penetration Tests MCQs | Page 12 of 12

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

Java Spring Framework

PHP

IT Fundamentals

MATLAB

C Programming

Hadoop

Python

Object Oriented Programming Using C++

MS Office