First Part

Which of the following is NOT a primary objective of penetration testing?

A penetration tester is given user account credentials and a network diagram before starting the test. Which type of penetration test is this?

Which type of penetration test involves evaluating internal vulnerabilities by conducting the test within the organization’s network?

In the OWASP Testing Framework, which phase involves actively attempting to exploit identified vulnerabilities to determine their real-world impact?

In the NIST SP 800-115 process, which phase focuses on setting clear objectives and defining the boundaries of the test?

A testing team has finished identifying vulnerabilities and now needs to summarize their findings, provide recommendations, and track remediation efforts. Which NIST SP 800-115 phase is this?

Which activity would be considered active reconnaissance?

Which phase of the Cyber Kill Chain involves developing malicious tools or exploits to take advantage of identified vulnerabilities?

Which Cyber Kill Chain phase comes immediately after exploitation and typically involves establishing persistence on the target system?