CSOC Vulnerability Assessment 2

Question 1

What is the purpose of a 'scope' definition in a penetration test engagement?

Accepted Answer

To define which systems, networks, and methods are authorised for testing, protecting both the tester and the organisation from unintended harm

Answer

Defining the scope of a penetration test establishes clear boundaries for what is authorised. It protects systems outside the scope from accidental disruption and ensures the tester has legal authorisation for the activities performed.

Question 2

What is a 'grey box' penetration test?

Accepted Answer

A test where the tester is given partial knowledge of the target system, simulating an attacker with some internal information

Answer

In a grey box penetration test, the tester has partial knowledge of the target environment — such as network diagrams or limited credentials — simulating a scenario where an attacker has obtained some insider information.

Question 3

What is the purpose of a vulnerability disclosure process?

Accepted Answer

A structured process for security researchers to report discovered vulnerabilities to affected vendors so they can be fixed before public disclosure

Answer

Vulnerability disclosure (often called coordinated or responsible disclosure) is the process by which researchers notify affected vendors of vulnerabilities, giving them time to develop and release patches before the vulnerability is publicly disclosed.

Question 4

What is a 'red team' exercise in the context of cybersecurity?

Accepted Answer

A team of security professionals who simulate real-world attackers to test an organisation's defences holistically, including technical, physical, and social engineering tactics

Answer

A red team engagement uses ethical hackers to simulate realistic, sophisticated adversaries attacking an organisation across multiple dimensions — technical, physical, and human. This tests the full spectrum of defences in a way that individual penetration tests do not.

Question 5

What is the Common Vulnerabilities and Exposures (CVE) system?

Accepted Answer

A publicly maintained list of known cybersecurity vulnerabilities with unique identifiers, enabling consistent reference across security tools and databases

Answer

CVE is a global, publicly maintained list of known cybersecurity vulnerabilities, each assigned a unique CVE identifier. This standardises vulnerability referencing across different tools, vendors, and databases, enabling consistent communication about specific vulnerabilities.

CSOC Practice Test

CSOC Practice Test

CSOC Vulnerability Assessment 2