CCT CCT Ethical Hacking & Penetration Testing

Question 1

What document legally authorizes a penetration tester to conduct security testing against a target organization?

Accepted Answer

Statement of Authorization (SoA) / Get-Out-of-Jail card

Answer

Non-Disclosure Agreement (NDA)

Answer

Rules of Engagement (RoE) / Scope of Work

Answer

Service Level Agreement (SLA)

Question 2

Which penetration testing methodology phase involves gathering information about the target without directly interacting with its systems?

Accepted Answer

Passive reconnaissance

Answer

Active reconnaissance

Answer

Exploitation

Answer

Post-exploitation

Question 3

What is the primary purpose of the Metasploit Framework in penetration testing?

Accepted Answer

Develop, test, and execute exploit code against target systems

Answer

Perform passive DNS reconnaissance

Answer

Capture and analyze network packets

Answer

Scan for open wireless access points

Question 4

What distinguishes a 'white-box' penetration test from a 'black-box' test?

Accepted Answer

White-box testers have full knowledge of the target environment, while black-box testers have none

Answer

White-box tests are only performed on web applications

Answer

Black-box tests are more thorough than white-box tests

Answer

White-box tests are performed by internal staff only

Question 5

Which Nmap scan type is considered a 'stealth scan' because it does not complete the TCP three-way handshake?

Accepted Answer

SYN scan (-sS)

Answer

TCP Connect scan (-sT)

Answer

UDP scan (-sU)

Answer

FIN scan (-sF)

Question 6

What is privilege escalation in the context of a penetration test?

Accepted Answer

Increasing access rights from a lower-privileged account to a higher-privileged one

Answer

Gaining initial access to a target system

Answer

Exfiltrating data from a compromised host

Answer

Covering tracks after completing a test