Pentesting Fundamentals
-
Read me!
No Answer
-
You are given permission to perform a security audit on an organisation; what type of hacker would you be ?
Answer : White Hat
-
You attack an organisation and steal their data, what type of hacker would you be ?
Answer : Black Hat
-
What document defines how a penetration testing engagement should be carried out ?
Answer : Rules of Engagement
-
What stage of penetration testing involves using publicly available information ?
Answer : Information Gathering
-
If you wanted to use a framework for pentesting telecommunications, what framework would you use? Note: We're looking for the acronym here and not the full name.
Answer : OSSTMM
-
What framework focuses on the testing of web applications ?
Answer : OWASP
-
You are asked to test an application but are not given access to its source code - what testing process is this?
Answer : Black Box
-
You are asked to test a website, and you are given access to the source code - what testing process is this?
Answer : White Box
-
Complete the penetration test engagement against ACME's infrastructure.
Answer : THM{PENTEST_COMPLETE}