Deck 4: Exploring Penetration Testing

Question 1

Which of the following biases involves making a decision before investigating and then only looking for data that supports the theory?

A) Present bias
B) Framing effect
C) Confirmation bias
D) Availability bias

Answer 1

Confirmation bias

Question 2

What term describes an expansion of a test beyond the initial set of the test's limitations?

Answer 2

Creep

Question 3

At which level of penetration testing are testers given limited knowledge of the network and some elevated privileges?

A) Gray box
B) White box
C) Black box
D) Yellow box

Answer 3

Gray box

Question 4

______________ bias tends to discount future risks and gains in favor of immediate gratification.

Question 5

Which of the following is not considered an advantage of contracting with an external third party to conduct a penetration test?

A) Expertise
B) Focus
C) Experience
D) Cost

Question 6

What is the process of turning binary machine language back into source code?

A) Reverse engineering
B) Disassembling
C) Decomposition
D) Decompensation

Question 7

What term describes a network of vendors, manufacturers, and distributors that move a product from the supplier to the customer?

Question 8

Which of the following is the isolation of malware from interaction with a computer's operating system, hardware, and files?

A) Disassembling
B) Sandboxing
C) Decompiling
D) Reverse engineering

Question 9

A risk matrix is a visual color-coded tool that lists the impact and likelihood of risks.

Question 10

For software, a digital representation or _______________ of the original file can be created and then compared against a later version of the file; if the two versions match, the code has not changed.