CCP Vulnerability Assessment & Penetration Testing

Question 1

What is the primary difference between a vulnerability assessment and a penetration test?

Accepted Answer

A vulnerability assessment identifies and prioritizes weaknesses without exploiting them, while a penetration test attempts to actively exploit them

Answer

A vulnerability assessment actively exploits weaknesses, while a penetration test only identifies them

Answer

A vulnerability assessment is performed externally, while a penetration test is performed internally

Answer

A vulnerability assessment requires written authorization, while a penetration test does not

Question 2

Which CVSS v3.1 score range is classified as 'Critical' severity?

Accepted Answer

9.0 – 10.0

Answer

7.0 – 8.9

Answer

6.0 – 7.9

Answer

8.5 – 10.0

Question 3

During a penetration test, what does 'pivoting' refer to?

Accepted Answer

Using a compromised host as a launching point to attack other systems within the network

Answer

Switching from a white-box to a black-box engagement mid-test

Answer

Escalating privileges on a single compromised system

Answer

Changing attack vectors after initial reconnaissance fails

Question 4

What type of penetration test provides the tester with full knowledge of the target environment, including network diagrams, source code, and credentials?

Accepted Answer

White-box test

Answer

Black-box test

Answer

Grey-box test

Answer

Red team assessment

Question 5

Which tool is most commonly used for automated network vulnerability scanning in enterprise environments?

Accepted Answer

Nessus

Answer

Metasploit

Answer

Burp Suite

Answer

Wireshark

Question 6

What does the OWASP Top 10 primarily focus on?

Accepted Answer

The ten most critical security risks for web applications

Answer

The ten most common network-layer vulnerabilities

Answer

The top ten malware families targeting enterprises

Answer

The ten leading causes of data breaches per year

Question 7

In the context of penetration testing, what is 'passive reconnaissance'?

Accepted Answer

Gathering information about a target using publicly available sources without directly interacting with the target's systems

Answer

Scanning open ports on a target without sending exploit payloads

Answer

Running vulnerability scans with credentials to reduce false positives

Answer

Observing network traffic on an internal segment after gaining access