QUESTION: 88

Information gathering is performed to:
i) Collect basic information about the target company and its network ii) Determine the operating system used, platforms running, web server versions, etc.
iii) Find vulnerabilities and exploits

Which of the following pen testing tests yields information about a company's technology infrastructure?

Searching for web page posting patterns
Analyzing the link popularity of the company's website
Searching for trade association directories
Searching for a company's job postings

Answer(s): D

Reveal Solution Next Question

QUESTION: 89

Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

What does a vulnerability assessment identify?

Disgruntled employees
Weaknesses that could be exploited
Physical security breaches
Organizational structure

Answer(s): B

Reveal Solution Next Question

QUESTION: 90

Rules of Engagement (ROE) document provides certain rights and restriction to the test team for performing the test and helps testers to overcome legal, federal, and policy-related restrictions to use different penetration testing tools and techniques.

What is the last step in preparing a Rules of Engagement (ROE) document?