A CSP contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The CSP's security…

The correct answer is D. Double blind. A double blind penetration test keeps two parties uninformed simultaneously: (1) the tester has no prior knowledge of the target's architecture, defenses, or assets - they engage as a real attacker would - and (2) the internal security/SOC team is not notified that a test is…

Cloud Security Auditing

Question

A CSP contracts for a penetration test to be conducted on its infrastructures. The auditor engages the target with no prior knowledge of its defenses, assets, or channels. The CSP's security operation center is not notified in advance of the scope of the audit and the test vectors. Which mode is selected by the CSP?

Options

ADouble gray box
BTandem
CReversal
DDouble blind

How the community answered

(35 responses)

A
3% (1)
B
6% (2)
C
3% (1)
D
89% (31)

Explanation

A double blind penetration test keeps two parties uninformed simultaneously: (1) the tester has no prior knowledge of the target's architecture, defenses, or assets - they engage as a real attacker would - and (2) the internal security/SOC team is not notified that a test is occurring, its scope, or its vectors. This scenario matches exactly: the auditor engaged 'with no prior knowledge' and the SOC 'was not notified.' Tandem (B) is a collaborative, open-box test. Reversal (C) involves the defenders acting as attackers. Double gray box (A) involves partial knowledge shared with both parties. Double blind provides the most realistic simulation of an actual attack.

Topics

#Penetration testing#Security testing types#Audit methodologies#Double blind testing

Community Discussion

No community discussion yet for this question.

Full CCAK Practice