Home › Quizzes › Penetration Testing Tools and Techniques

Penetration Testing Tools and Techniques

This quiz covers tools, techniques, and methodologies used in software penetration testing including blind testing, automated tools, manual testing, vulnerability detection, and penetration testing strategies for IT certification exams.

15 Questions Published
Play Quiz Practise this topic out loud

Questions

Question 1 Multiple Choice (Single Answer)

What is the assumption in the penetration test?

  1. A penetration test is used to check the system protection from vulnerabilities.
  2. This test is performed to identify the target system and the goal.
  3. A penetration test can be white box or black box.
  4. All of the above
  5. Both (1) and (2)
Question 2 Multiple Choice (Single Answer)

Which of the following can be applied in 'security research'?

  1. Security researches are used typically to find vulnerability in the system.
  2. Security research has the similar tools that the penetration testing has.
  3. Security researches have more time than penetration test.
  4. It makes sure you check your country’s legislation before you start researching and especially before you publish any research.
  5. All of the above
Question 3 Multiple Choice (Single Answer)

What are the tasks performed in the penetration testing of software?

  1. It determines the feasibility of a particular set of attack vectors.
  2. It identifies the vulnerabilities that may be difficult or impossible to detect with automated network or application vulnerability scanning software.
  3. This test is used to check the ability of network defenders to successfully detect and respond to the attacks.
  4. It provides evidence to support increased investments in security personnel and technology.
  5. All of the above
Question 4 Multiple Choice (Single Answer)

Which of the following statements is/are correct about blind testing in penetration test tools?

  1. It simulates the actions and procedures of a real attacker and informs the person who is going to test it.
  2. This testing requires a considerable amount of time for reconnaissance.
  3. These tests can be useful for testing an organisation's security monitoring.
  4. All of the above
  5. Both (1) and (2)
Question 5 Multiple Choice (Single Answer)

Which types of vulnerabilities are detected in penetration test?

  1. Vulnerability can be as simple as weak passwords.
  2. Buffer overflows
  3. SQL injection
  4. Security hole in a piece of software, hardware or operating system
  5. All of the above
Question 6 Multiple Choice (Single Answer)

Which of the following statements is/are correct about double blind testing tool in penetration testing?

  1. In this testing, only one or two people are aware of the test to be conducted.
  2. It is useful for testing an organisation's security monitoring and incident identification as well as its response procedures.
  3. This testing is useful for estimating how much damage a disgruntled employee could cause.
  4. All of the above
  5. Both (1) and (2)
Question 7 Multiple Choice (Single Answer)

Which of the following is/are applicable for 'internal testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.
  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, etc.
  3. This testing is useful for estimating how much damage a disgruntled employee could cause.
  4. This type of testing involves simulation of the tools and procedures of a real attacker.
  5. Both (2) and (3)
Question 8 Multiple Choice (Single Answer)

Which of the following is/are applicable for 'targeted testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.
  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers.
  3. This testing is useful for estimating how much damage a disgruntled employee could cause.
  4. This type of testing involves simulation of the tools and procedures of a real attacker.
  5. All of the above
Question 9 Multiple Choice (Single Answer)

What are the automated testing tools applied in penetration test?

  1. These tools discover a combination of legal operations that will let the tester execute an illegal operation.
  2. The metasploit provides a ruby library for common tasks and maintains a database of known exploits.
  3. Fuzzing is a common technique to discover vulnerabilities and other exploiters.
  4. All of the above
  5. Only (2) and (3)
Question 10 Multiple Choice (Single Answer)

Which of the following is/are applicable for manual penetration test?

  1. This testing layers human expertise on top of professional penetration testing software and tools.
  2. It provides complete coverage for standard vulnerability classes, as well as other design, business logic, and compound flaw risks.
  3. This test does not include automated static binary and automated dynamic analysis.
  4. All of the above
  5. Both (1) and (2)
Question 11 Multiple Choice (Single Answer)

Which of the following is/are applicable for 'external testing' in penetration test tools?

  1. This type of testing is performed by the organisation's IT team and the penetration testing team working together.
  2. This type of testing targets a company's externally visible servers or devices including domain name servers (DNS), e-mail servers, etc.
  3. This testing is useful for estimating how much damage a disgruntled employee could cause.
  4. This type of testing involves simulation of the tools and procedures of a real attacker.
  5. Both (2) and (4)
Question 12 Multiple Choice (Single Answer)

Which of the following statements is/are false about penetration testing?

  1. A penetration testing simply identifies and reports noted vulnerabilities.
  2. Penetration testing is used to determine whether unauthorised access or other malicious activity is possible.
  3. Penetration testing typically includes network penetration testing and application security testing.
  4. It tests the system outside the network trying to come in (external testing) and from inside the network.
  5. None of the above
Question 13 Multiple Choice (Single Answer)

Which of the following is/are correct about 'veracode' tools in penetration test?

  1. This tool determines whether sufficient encryption is employed and whether a piece of software contain any application backdoors through hard-coded user names or passwords.
  2. Veracode's binary scanning approach produces more accurate testing results.
  3. This tool performs both dynamic and static code analysis.
  4. All of the above
  5. Both (1) and (3)
Question 14 Multiple Choice (Single Answer)

What are the penetrating methodologies adopted in software industry?

  1. When the threats and vulnerabilities have been evaluated, then design the penetration testing to address the risks identified throughout the environment.
  2. Penetration testing should be appropriate for the complexity and size of an organisation.
  3. Penetration testing determines if there is any unauthorised access to key systems and files can be achieved.
  4. The penetration testing can be re-performed until the test is clean and no longer allows unauthorised access or other malicious activity.
  5. All of the above
Question 15 Multiple Choice (Single Answer)

Which of the following is/are correct about 'White hat'?

  1. 'White hat' is a penetration strategy.
  2. It identifies a security weakness in a computer system or network.
  3. The white hat hacker may work as a consultant or be a permanent employee on a company's payroll.
  4. All of the above
  5. Only (1) and (3)
← Back to Quizzes