Cyber Security Jobs Penetration Testing and Ethical Hacking

Question 1

What is the first phase of a penetration test?

Accepted Answer

Reconnaissance (information gathering)

Answer

Reconnaissance is the first phase where testers gather as much information as possible about the target without actively attacking it.

Question 2

What is the difference between black box and white box penetration testing?

Accepted Answer

Black box: no prior knowledge; white box: full knowledge of the system

Answer

In black box testing the tester has no prior knowledge simulating an outsider, while white box testing provides full access and knowledge simulating an insider threat.

Question 3

Which tool is most commonly used for network discovery and port scanning in penetration testing?

Accepted Answer

nmap

Answer

nmap (Network Mapper) is the industry-standard tool for discovering hosts, open ports, services, and operating systems on a target network.

Question 4

What is a scope of work (SOW) in penetration testing?

Accepted Answer

A document defining what systems are authorized for testing and the rules of engagement

Answer

The SOW defines the boundaries of the engagement — which systems can be tested, what methods are allowed, and timeframes — protecting both parties legally.

Question 5

What does CVE stand for in vulnerability research?

Accepted Answer

Common Vulnerabilities and Exposures

Answer

CVE (Common Vulnerabilities and Exposures) is the standardized list of publicly known cybersecurity vulnerabilities, each assigned a unique ID (e.g., CVE-2021-44228).

Cyber Security Jobs Practice Test

Cyber Security Jobs Practice Test

Cyber Security Jobs Penetration Testing and Ethical Hacking