What kind of security weakness is evaluated by application-based penetration tests? firewall security logic flaws wireless deployment data integrity between a client and a cloud provider Explanation & Hints: Application-based…
What is an insider threat attack? An attack perpetrated by a well-funded and motivated group that will typically use the latest attack techniques for financial gain. An attack perpetrated by…
What is a state-sponsored attack? An attack perpetrated by a well-funded and motivated group that will typically use the latest attack techniques for financial gain. An attack perpetrated by governments…
Which type of threat actor uses cybercrime to steal sensitive data and reveal it publicly to embarrass a target? organized crime hacktivist insider threat state-sponsored attacker Explanation & Hints: Hacktivists…
Which threat actor term describes a well-funded and motivated group that will use the latest attack techniques for financial gain? hacktivist state-sponsored attacker organized crime insider threat Explanation & Hints:…
A company hires a cybersecurity consultant to perform penetration tests. What is the key difference between unknown-environment testing and known-environment testing? the types of systems and network to be tested …
A company hires a cybersecurity consultant to perform penetration tests. The consultant is discussing with the company about the penetration testing strategy. Which statement describes the term unknown-environment testing? This…
A company hires a cybersecurity consultant to perform penetration tests. The consultant is working with the company to set up communication procedures. Which two protocols should be considered for exchanging…
A company hires a cybersecurity consultant to perform penetration tests. What should be the consultant's first step in validating the engagement scope? Confirm the contents of the request for proposal…
A company hires a cybersecurity consultant to perform penetration tests. What can cause scope creep of the engagement? lack of up-to-date testing tools lack of system and network architectural diagrams …
A company hires a cybersecurity consultant to assess vulnerability on crucial web application devices such as web and database servers. Which document should the company provide to help the consultant…
A company hires a cybersecurity consultant to assess applications using different APIs. Which document should the company provide to the consultant about a query language for APIs and a language…
A company hires a cybersecurity consultant to assess applications using different APIs. Which document should the company provide to the consultant about an XML-based language used to document a web…
A company hires a cybersecurity consultant to perform penetration tests and review the rules of engagement documents. The consultant notices that one element specifies that the tests should be performed…
A company hires a cybersecurity consultant to perform penetration tests and review the rules of engagement documents. What are three examples of typical elements in the rules of engagement document?…
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. The consultant is preparing the final report after the penetration testing is completed. In which…
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. Which document must the consultant receive that specifies the agreement between the consultant and the…
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. The company wants the consultant to disclose information to them and no one else. Which…
A company hires a cybersecurity professional to perform penetration testing to assess government regulation compliance. Which document will be provided to the cybersecurity professional that specifies a detailed and descriptive…
A company hires a cybersecurity professional to perform penetration tests to assess government regulation compliance. Which legal document should be provided to the cybersecurity professional that specifies the expectations and…