312-49 · Question #376
Why is it a good idea to perform a penetration test from the inside?
The correct answer is C. Because 70% of attacks are from inside the organization. Industry statistics consistently show that a substantial majority of security incidents - often cited at around 70% - originate from inside the organization, whether from malicious insiders, compromised internal accounts, or contractor abuse. An internal penetration test…
Question
Why is it a good idea to perform a penetration test from the inside?
Options
- AIt is never a good idea to perform a penetration test from the inside
- BIt is easier to hack from the inside
- CBecause 70% of attacks are from inside the organization
- DTo attack a network from a hacker's perspective
How the community answered
(21 responses)- B5% (1)
- C86% (18)
- D10% (2)
Explanation
Industry statistics consistently show that a substantial majority of security incidents - often cited at around 70% - originate from inside the organization, whether from malicious insiders, compromised internal accounts, or contractor abuse. An internal penetration test simulates these insider threat scenarios, identifying weaknesses in internal network segmentation, access controls, privilege escalation paths, and lateral movement opportunities that external tests would never reach. Focusing solely on external testing leaves the largest attack surface untested. Internal tests complement external tests to provide a complete security posture assessment.
Topics
Community Discussion
No community discussion yet for this question.