SE Vulnerability Assessment and Penetration Testing

Question 1

What is the primary difference between a vulnerability assessment and a penetration test?

Accepted Answer

A vulnerability assessment identifies weaknesses; a penetration test actively exploits them to demonstrate impact

Answer

Vulnerability assessments catalog known weaknesses, while penetration tests go further by exploiting vulnerabilities to confirm real-world risk.

Question 2

In a penetration test scope definition, what does 'rules of engagement' specify?

Accepted Answer

The boundaries, permitted actions, timing, and escalation procedures for the test

Answer

Rules of engagement define the scope, prohibited actions, notification requirements, and emergency contacts to ensure a controlled and legal test.

Question 3

Which CVSS metric indicates how complex the conditions must be for an attacker to exploit a vulnerability?

Accepted Answer

Attack Complexity

Answer

The CVSS Attack Complexity metric reflects whether exploitation requires specific conditions beyond the attacker's control, such as race conditions.

Question 4

What type of scan discovers live hosts and open ports on a network without attempting exploitation?

Accepted Answer

Discovery / reconnaissance scan

Answer

A discovery scan (e.g., using Nmap) maps the network, identifying live hosts and open services without testing for vulnerabilities.

Question 5

A tester has no prior knowledge of the target environment. Which type of penetration test is this?

Accepted Answer

Black-box test

Answer

A black-box test simulates an external attacker with no insider knowledge, requiring the tester to perform full reconnaissance.

SE - Security Engineer Practice Test