nerdexam
(ISC)2

CGRC · Question #156

Security testing that involves direct interaction with a target, such as sending packets to a target. Response:

The correct answer is A. Active Security Testing. Active security testing involves directly interacting with a target system, such as sending packets, to assess its vulnerabilities and responses.

Assessment/Audit of Security and Privacy Controls

Question

Security testing that involves direct interaction with a target, such as sending packets to a target. Response:

Options

  • AActive Security Testing
  • BRecovery Point Objective
  • CInternal Security Testing
  • DGeneral Support System

How the community answered

(38 responses)
  • A
    89% (34)
  • B
    3% (1)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Active security testing involves directly interacting with a target system, such as sending packets, to assess its vulnerabilities and responses.

AActive Security TestingCorrect

Active security testing, also known as active scanning or probing, refers to the process of directly engaging with a target system or network by sending specifically crafted inputs, like network packets, to observe its behavior and identify vulnerabilities. This direct interaction helps reveal how a system responds to various stimuli, thereby uncovering potential weaknesses.

BRecovery Point Objective

Recovery Point Objective (RPO) is a disaster recovery metric related to data loss, not a type of security testing.

CInternal Security Testing

Internal Security Testing describes the location of the testing (from within the organization's network), not the methodology of direct interaction.

DGeneral Support System

A General Support System (GSS) is an information system that provides major application components or infrastructure for multiple applications, not a type of security testing.

Concept tested: Active security testing definition

Source: https://csrc.nist.gov/publications/detail/sp/800-115/final

Topics

#Security Testing#Active Testing#Vulnerability Assessment#Penetration Testing

Community Discussion

No community discussion yet for this question.

Full CGRC Practice