16 Review

Which of the following is not a stage in a penetration testing engagement?

• Scanning
• Exploitation
• Logging
• Reporting

Which term represents the defined boundaries of a penetration test?

• Scope
• Length
• Limits
• Borders

What does SoW stand for?

• Scope of Work
• Statement of Work
• Service of Will
• Statement of Willingness

Having no knowledge of the target before starting an assessment is called what?

• Full view / White box
• Partial view/ Grey box
• Guided view/ Crystal box
• No view / black box

What is TTP?

• Techniques, Tactics, & Procedures
• Threats, Tactics, & Processes
• Telemetry, Techniques, & Products
• Techniques, Threats, & Procedures

What does OSINT stand for?

• Operational Situational Intelligence
• Opinionated Structure Integer
• Open Source Intelligence
• Operational Security Intelligence

What is the most widely used port-scanning tool?

• Nessus
• John
• Netscanner
• Nmap

What language are NSE scripts written in?

• Python
• LUA
• Java
• C

What is the correct Nmap flag for scanning services and their versions?

• -sV
• -v
• -sS
• -sT

If an exploit script is written in ruby (.rb), this most likely suggests what?

• The script requires configuration.
• The script will most likely fail.
• The script requires authentication.
• The script is also a Metasploit module.