Answers
No passwords or network layout given
Keeps within the law
Reputation is damaged
Looks for weaknesses from within
Helps fix the weaknesses found
Company loses money
Carried out by a white hat
Identify likely attack targets
Attempt to break into the system
Aims to improve security
Physical security
Brute-force attacks
Looks for weaknesses from outside
Social engineering
Tester uses valid credentials
Encryption
Denial of service attacks
Given network and system information
Unauthorised access is a crime
Anti-malware software
Firewalls
Strong passwords
Access control levels
Helps to fix the holes found
No inside knowledge of the system
Personal data is stolen
Report the findings back
Informs the owner of weaknesses
Identify possible entry points
Insider access is simulated
Malware such as viruses
External attacker is simulated
Lawful use of attack techniques
Data interception
Permission from the system owner
Files are changed or deleted