Before performing the penetration testing, there will be a pre-contract discussion with different pen-testers (the team of penetration testers) to gather a quotation to perform pen testing.

Which of the following factors is NOT considered while preparing a price quote to perform pen testing?

1. A. Total number of employees in the client organization
2. B. Type of testers involved
3. C. The budget required
4. D. Expected time required to finish the project

Correct Answer: A

What is the target host IP in the following command?

1. A. Firewalk does not scan target hosts
2. B. 172.16.28.95
3. C. This command is using FIN packets, which cannot scan target hosts
4. D. 10.10.150.1

Correct Answer: A

Vulnerability assessment is an examination of the ability of a system or application, including the current security procedures and controls, to withstand assault.

What does a vulnerability assessment identify?

1. A. Disgruntled employees
2. B. Weaknesses that could be exploited
3. C. Physical security breaches
4. D. Organizational structure

Correct Answer: B

Which of the following is not a characteristic of a firewall?

1. A. Manages public access to private networked resources
2. B. Routes packets between the networks
3. C. Examines all traffic routed between the two networks to see if it meets certain criteria
4. D. Filters only inbound traffic but not outbound traffic

Correct Answer: D

A framework is a fundamental structure used to support and resolve complex issues. The framework that delivers an efficient set of technologies in order to develop applications which are more secure in using Internet and Intranet is:

1. A. Microsoft Internet Security Framework
2. B. Information System Security Assessment Framework (ISSAF)
3. C. Bell Labs Network Security Framework
4. D. The IBM Security Framework

Correct Answer: A