CGRC · Question #156
Security testing that involves direct interaction with a target, such as sending packets to a target. Response:
The correct answer is A. Active Security Testing. Active security testing involves directly interacting with a target system, such as sending packets, to assess its vulnerabilities and responses.
Question
Security testing that involves direct interaction with a target, such as sending packets to a target. Response:
Options
- AActive Security Testing
- BRecovery Point Objective
- CInternal Security Testing
- DGeneral Support System
How the community answered
(38 responses)- A89% (34)
- B3% (1)
- C5% (2)
- D3% (1)
Why each option
Active security testing involves directly interacting with a target system, such as sending packets, to assess its vulnerabilities and responses.
Active security testing, also known as active scanning or probing, refers to the process of directly engaging with a target system or network by sending specifically crafted inputs, like network packets, to observe its behavior and identify vulnerabilities. This direct interaction helps reveal how a system responds to various stimuli, thereby uncovering potential weaknesses.
Recovery Point Objective (RPO) is a disaster recovery metric related to data loss, not a type of security testing.
Internal Security Testing describes the location of the testing (from within the organization's network), not the methodology of direct interaction.
A General Support System (GSS) is an information system that provides major application components or infrastructure for multiple applications, not a type of security testing.
Concept tested: Active security testing definition
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.