Cyber Security Jobs Penetration Testing and Ethical Hacking 1 — Questions and Answers
Question 1: What is the first phase of a penetration test?
- Reconnaissance (information gathering) (Correct answer)
- Exploitation
- Reporting
- Cleanup
Correct answer: Reconnaissance (information gathering)
Reconnaissance is the first phase where testers gather as much information as possible about the target without actively attacking it.
Question 2: What is the difference between black box and white box penetration testing?
- Black box: no prior knowledge; white box: full knowledge of the system (Correct answer)
- Black box: testing in the dark; white box: testing with lights on
- Black box: external test; white box: internal hardware inspection
- Black box: automated scan; white box: manual review
Correct answer: Black box: no prior knowledge; white box: full knowledge of the system
In black box testing the tester has no prior knowledge simulating an outsider, while white box testing provides full access and knowledge simulating an insider threat.
Question 3: Which tool is most commonly used for network discovery and port scanning in penetration testing?
- nmap (Correct answer)
- Microsoft Excel
- Photoshop
- VLC Media Player
Correct answer: nmap
nmap (Network Mapper) is the industry-standard tool for discovering hosts, open ports, services, and operating systems on a target network.
Question 4: What is a scope of work (SOW) in penetration testing?
- A document defining what systems are authorized for testing and the rules of engagement (Correct answer)
- A summary of all vulnerabilities found
- A court order authorizing the test
- A software license for testing tools
Correct answer: A document defining what systems are authorized for testing and the rules of engagement
The SOW defines the boundaries of the engagement — which systems can be tested, what methods are allowed, and timeframes — protecting both parties legally.
Question 5: What does CVE stand for in vulnerability research?
- Common Vulnerabilities and Exposures (Correct answer)
- Certified Vulnerability Expert
- Critical Vector Enumeration
- Cyber Vulnerability Evaluation
Correct answer: Common Vulnerabilities and Exposures
CVE (Common Vulnerabilities and Exposures) is the standardized list of publicly known cybersecurity vulnerabilities, each assigned a unique ID (e.g., CVE-2021-44228).
Question 6: Which certification is widely regarded as the gold standard for penetration testers?
- OSCP (Offensive Security Certified Professional) (Correct answer)
- CompTIA A+
- Google Cloud Associate
- Cisco CCNA
Correct answer: OSCP (Offensive Security Certified Professional)
OSCP from Offensive Security is considered the top practical penetration testing certification, requiring a 24-hour hands-on exam with no multiple choice.
Cyber Security Jobs Penetration Testing and Ethical Hacking 1
What is the first phase of a penetration test?