Security Operations第 77 / 100 题
An authorized simulated attack that attempts to exploit vulnerabilities to test defenses is a:
a.Vulnerability scan
b.Compliance audit
c.Penetration test
d.Tabletop exercise
解析
A penetration test authorizes ethical hackers to actively exploit weaknesses to demonstrate real-world risk. It validates whether vulnerabilities are truly exploitable and how far an attacker could get. Rules of engagement define scope and limits.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which metric defines the maximum acceptable time to restore a service after an outage?
- Which recovery site is fully equipped and can take over operations almost immediately?
- Which scan identifies known weaknesses in systems without actively exploiting them?
- Which detection method flags activity that deviates from an established normal pattern?
- Which endpoint solution continuously records activity and enables investigation and automated response to threats on hosts?
- Which practice ensures logs cannot be tampered with by centralizing them on a protected, write-once server?