Cyber Security Ethical Hacking and Penetration Testing 1 — Questions and Answers
Question 1: What is the first phase of a penetration testing engagement?
- Exploitation
- Reconnaissance (Correct answer)
- Reporting
- Post-exploitation
Correct answer: Reconnaissance
Reconnaissance is the first phase where the tester gathers information about the target before attacking.
Question 2: What distinguishes a white-box penetration test from a black-box test?
- White-box testers have no prior knowledge; black-box testers have full knowledge
- White-box testers have full knowledge of the target; black-box testers have none (Correct answer)
- White-box tests are automated; black-box tests are manual
- Black-box tests require physical access; white-box tests do not
Correct answer: White-box testers have full knowledge of the target; black-box testers have none
In a white-box test, the tester has full knowledge of the target environment, simulating an insider threat or informed attacker.
Question 3: What document legally authorizes a penetration tester to perform testing activities on a client's systems?
- Non-Disclosure Agreement (NDA)
- Rules of Engagement (RoE) and Scope of Work (Correct answer)
- Vulnerability Assessment Report
- Statement of Health (SoH)
Correct answer: Rules of Engagement (RoE) and Scope of Work
The Rules of Engagement and Scope of Work define what is authorized, limiting legal risk for the tester.
Question 4: Which tool is widely used for network scanning and host discovery during the reconnaissance phase?
- Wireshark
- Nmap (Correct answer)
- Metasploit
- John the Ripper
Correct answer: Nmap
Nmap is the industry-standard tool for network discovery, port scanning, and service enumeration.
Question 5: What is privilege escalation in the context of ethical hacking?
- Gaining initial access to a system
- Gaining higher-level permissions on a system after initial access (Correct answer)
- Exfiltrating data from a compromised host
- Covering tracks by deleting logs
Correct answer: Gaining higher-level permissions on a system after initial access
Privilege escalation involves exploiting vulnerabilities or misconfigurations to gain elevated permissions such as root or admin.
Question 6: Which phase of penetration testing involves documenting findings and providing remediation recommendations?
- Exploitation
- Reconnaissance
- Reporting (Correct answer)
- Lateral movement
Correct answer: Reporting
The reporting phase documents vulnerabilities found, their severity, and recommended remediation steps for the client.
Cyber Security Ethical Hacking and Penetration Testing 1
What is the first phase of a penetration testing engagement?