Penetration testing (also called pen testing) is the practice of testing a computer system, network, or Web application to find vulnerabilities that an attacker could exploit. Which of the following areas can be exploited in a penetration test? Each correct answer represents a complete solution. Choose all that apply. Response:

Question

Accepted Answer

A. Race conditions Race conditions in applications or systems can lead to security vulnerabilities if not handled correctly, allowing attackers to manipulate system state. B. Social engineering Social engineering attacks exploit human psychology and behavior to gain unauthorized access or information, and are a common target in penetration testing. D. Buffer overflows Buffer overflows are classic software vulnerabilities that can allow an attacker to execute arbitrary code or crash a system. E. Kernel flaws Kernel flaws represent critical vulnerabilities within the operating system's core, offering high-impact exploitation opportunities. F. Trojan horses Trojan horses are malicious software disguised as legitimate programs, which penetration testers might attempt to plant or simulate to test an organization's defenses. G. File and directory permissions Improper file and directory permissions can expose sensitive information or allow unauthorized modification, making them a common target for exploitation.

Answer

C. Information system architectures Information system architectures themselves are not directly 'exploited' in a penetration test; rather, flaws or vulnerabilities within the architecture (e.g., misconfigurations, weak design choices) are what lead to exploitable weaknesses.

Penetration testing (also called pen testing) is the practice of testing a computer system, network, or Web application to find vulnerabilities that an attacker could exploit. Which of the following a

Question

Options

How the community answered

Why each option

Topics

Community Discussion