Penetration Testing quiz

Test your Penetration Testing knowledge with a free interactive quiz — 20 questions with answers and explanations. No signup needed to play.

What does "exploitation" mean as a phase of penetration testing, following identification of a candidate vulnerability?

1. What does "exploitation" mean as a phase of penetration testing, following identification of a candidate vulnerability?
2. What is the purpose of a "Common Vulnerability Scoring System" (CVSS) score commonly attached to findings in a penetration test report?
3. What is "social engineering" as a category of technique sometimes included in a broader penetration testing or red team engagement?
4. What is penetration testing?
5. What is the general difference in scope and depth between a "vulnerability assessment" and a full "penetration test"?
6. Why is explicit authorization ("scope" and permission from the system owner) considered essential before conducting a penetration test?
7. What is the difference between a "black box," "white box," and "gray box" penetration test in terms of the information given to the tester beforehand?
8. What is a realistic reason an organization might choose to conduct regular, recurring penetration tests rather than treating it as a single, one-time activity?
9. What is the purpose of a "rules of engagement" document agreed upon before a penetration test begins?
10. What does "vulnerability scanning" typically contribute to a penetration test, and how does it differ from the exploitation phase?
11. Why might a penetration tester need to be especially careful when testing against production systems, as opposed to a dedicated test/staging environment?
12. What is "reconnaissance" (or "information gathering") as an early phase of a typical penetration testing methodology?

More quizzes