CAS-003 · Question #50
An advanced threat emulation engineer is conducting testing against a client's network. The engineer conducts the testing in as realistic a manner as possible. Consequently, the engineer has been…
The correct answer is A. Black box testing E. Vulnerability assessment F. Pivoting. This describes an Advanced Persistent Threat (APT) emulation, also known as red team testing. Black box testing (A) means the engineer starts with no insider knowledge, simulating a real external attacker - consistent with 'realistic' testing. Vulnerability assessment (E)…
Question
An advanced threat emulation engineer is conducting testing against a client's network. The engineer conducts the testing in as realistic a manner as possible. Consequently, the engineer has been gradually ramping up the volume of attacks over a long period of time. Which of the following combinations of techniques would the engineer MOST likely use in this testing? (Choose three.)
Options
- ABlack box testing
- BGray box testing
- CCode review
- DSocial engineering
- EVulnerability assessment
- FPivoting
- GSelf-assessment
- HWhite teaming
- IExternal auditing
How the community answered
(39 responses)- A69% (27)
- B5% (2)
- C3% (1)
- G8% (3)
- I15% (6)
Explanation
This describes an Advanced Persistent Threat (APT) emulation, also known as red team testing. Black box testing (A) means the engineer starts with no insider knowledge, simulating a real external attacker - consistent with 'realistic' testing. Vulnerability assessment (E) involves systematically identifying weaknesses in the target network to exploit during the engagement. Pivoting (F) is the technique of using a compromised system as a launching point to attack other internal systems, which is central to APT simulation and explains the 'gradual ramp-up.' Gray box testing (B) involves partial knowledge, which is less realistic for emulation. Code review (C), self-assessment (G), and internal auditing (I) are not adversarial techniques. Social engineering (D) and white teaming (H) are not core to the described scenario.
Topics
Community Discussion
No community discussion yet for this question.