Finding weaknesses and improving system security

Card 1 of 15 0 got it 0 still learning

Question

TapClick or press space to see the answer

Answer

Finding weaknesses and improving system security exam questions18 questions with mark schemes and example answers

All 15 cards in this set

Which of these best describes ethical hacking?: Breaking into a system to find weaknesses without causing damage
Which statement describes a white hat hacker?: An expert who is paid or invited to test a system
Which statement describes a grey hat hacker?: An outsider who finds a weakness without exploiting it for gain
Why do organisations employ penetration testers to attack their own systems?: To find weaknesses before an attacker can exploit them
Which of these would a penetration tester report as a security weakness?: Data and network traffic that are not encrypted
What is the purpose of an internal penetration test?: To find out how much damage a dishonest employee could cause
A penetration tester has gained access to a system and exploited a weakness. What should they do next?: Report the issues found and recommend improvements
Network logs show a large amount of data being sent to an unknown address at night. Why is analysing this data useful?: It can reveal a potential risk that needs investigating
A team of ethical hackers is hired to test a company's system. What must the team have before testing begins?: Authorisation to act from the company
What is meant by penetration testing?: Attempting to break into a system to find weaknesses
A company wants to find out whether staff are using its computers for personal activities. Which method would show this?: Checking the internet history saved on each computer
A company has fixed all of the weaknesses that a penetration test found. What should the company do next?: Test the system again to check the fixes work
Testers walked into a company office, plugged a laptop into an empty network socket and accessed the network. Which weakness does this show?: Poor physical security practice
During a penetration test, a tester finds that a server has not been updated for two years. Why does this make the server vulnerable?: Known weaknesses in the software are still unfixed
A company asks a team of testers to try to break into its network from outside the building. What is the team trying to find out?: How far an outside attacker could get in

Finding weaknesses and improving system security

Round complete