QUESTION: 45

Penetration testing (also called pen testing) is the practice of testing a computer system, network, or Web application to find vulnerabilities that an attacker could exploit.
Which of the following areas can be exploited in a penetration test?
Each correct answer represents a complete solution. Choose all that apply.

Social engineering
File and directory permissions
Buffer overflows
Kernel flaws
Race conditions
Information system architectures
Trojan horses

Answer(s): A,B,C,D,E,G

Reveal Solution Next Question

QUESTION: 46

Frank is the project manager of the NHH Project. He is working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified. It will also define how contingency plans will be implemented by the project team.
What document is Frank and the NHH Project team creating in this scenario?

Project management plan
Resource management plan
Risk management plan
Project plan

Answer(s): C

Reveal Solution Next Question

QUESTION: 47

In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?

Full operational test
Walk-through test
Penetration test
Paper test

Answer(s): C

Reveal Solution Next Question

QUESTION: 48

Which of the following DITSCAP phases validates that the preceding work has produced an IS that operates in a specified computing environment?

Phase 4
Phase 3
Phase 2
Phase 1

Answer(s): B

Reveal Solution Next Question

Free CAP Exam Braindumps (page: 13)

QUESTION: 45

QUESTION: 46

QUESTION: 47

QUESTION: 48

CAP Exam Discussions & Posts