nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #571

What is the purpose of a penetration test?

The correct answer is D. All of the above. A penetration test (pen test) is a comprehensive, authorized simulated attack against a system or network, and it serves all three purposes listed: (A) it assesses how effective existing security controls are in practice, (B) it tests whether the system can withstand real-world…

Security Principles

Question

What is the purpose of a penetration test?

Options

  • ATo assess the effectiveness of security controls
  • BTo test the system's ability to withstand an attack
  • CTo identify vulnerabilities in a system or network
  • DAll of the above

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    7% (3)
  • D
    90% (38)

Explanation

A penetration test (pen test) is a comprehensive, authorized simulated attack against a system or network, and it serves all three purposes listed: (A) it assesses how effective existing security controls are in practice, (B) it tests whether the system can withstand real-world attack techniques, and (C) it uncovers specific vulnerabilities that could be exploited. These goals are not mutually exclusive - they are complementary objectives of the same exercise. A pen test goes beyond automated scanning by actively attempting exploitation to confirm real-world impact, giving organizations a holistic view of their security posture.

Topics

#Penetration Testing#Vulnerability Assessment#Security Controls#Cybersecurity Testing

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice