Penetration Testing quiz

Test your Penetration Testing knowledge with a free interactive quiz — 20 questions with answers and explanations. No signup needed to play.

What is "social engineering" as a category of technique sometimes included in a broader penetration testing or red team engagement?

1. What is "social engineering" as a category of technique sometimes included in a broader penetration testing or red team engagement?
2. What does "exploitation" mean as a phase of penetration testing, following identification of a candidate vulnerability?
3. What does "lateral movement" refer to in a penetration test simulating a more thorough, realistic attack scenario?
4. What is the difference between a "black box," "white box," and "gray box" penetration test in terms of the information given to the tester beforehand?
5. What is the purpose of a "Common Vulnerability Scoring System" (CVSS) score commonly attached to findings in a penetration test report?
6. What is penetration testing?
7. What is the general relationship between the OWASP Top 10 (a well-known list of common web application security risks) and web application penetration testing?
8. What is the purpose of the final "reporting" phase of a penetration test?
9. What is a "red team" exercise, and how does it typically differ from a more standard, scoped penetration test?
10. What is a realistic reason an organization might choose to conduct regular, recurring penetration tests rather than treating it as a single, one-time activity?
11. What does "vulnerability scanning" typically contribute to a penetration test, and how does it differ from the exploitation phase?
12. What is the general difference in scope and depth between a "vulnerability assessment" and a full "penetration test"?

More quizzes