Pen Testing Exam 1 Questions & Answers 2023/2024

Pen Testing Exam 1 Questions & Answers 2023/2024 Vulnerability Assessment - ANSWER-Tester attempts to enumerate all vulnerabilities found in an application or on a system Hacker - ANSWER-Access computer system or network without authorization * Breaks the law; can go to prison Cracker - ANSWER-Break into systems to steal or destroy data *U.S. Department of Justice calls both hackers Script Kiddies - ANSWER-Younger, inexperienced hackers who copy codes from knowledgeable hackers Hacktivist - ANSWER-A person who hacks computer systems for political or social reasons White box model - ANSWER-Tester is told about network topology and technology *May be given a floor plan Tester is permitted to interview IT personnel and company employees *Makes tester's job a little easier Black box model - ANSWER-Staff does not know about the test Tester is not given details about technologies used *Burden is on tester to find details Tests security personnel's ability to detect an attack Gray box model - ANSWER-Hybrid of the white and black box models Company gives tester partial information (e.g., OSs are used, but no network diagrams)