CSSLP · Question #178
Which of the following is an example of penetration testing?
The correct answer is C. Simulating an actual attack on a network. Penetration testing is an authorized practice of simulating real-world attacks on a system or network to identify vulnerabilities and assess security posture from an attacker's perspective.
Question
Which of the following is an example of penetration testing?
Options
- AImplementing NIDS on a network
- BImplementing HIDS on a computer
- CSimulating an actual attack on a network
- DConfiguring firewall to block unauthorized traffic
How the community answered
(55 responses)- A2% (1)
- B9% (5)
- C85% (47)
- D4% (2)
Why each option
Penetration testing is an authorized practice of simulating real-world attacks on a system or network to identify vulnerabilities and assess security posture from an attacker's perspective.
Implementing NIDS (Network Intrusion Detection System) is a defensive security control used for monitoring and detecting threats, not simulating an attack.
Implementing HIDS (Host Intrusion Detection System) is a defensive security control used for monitoring and detecting threats on a specific host, not simulating an attack.
Penetration testing is explicitly defined as simulating an actual attack on a system or network to find vulnerabilities that an attacker could exploit. This proactive approach helps organizations understand their security weaknesses before malicious actors do.
Configuring a firewall to block unauthorized traffic is a fundamental preventative security measure, not an offensive simulation of an attack.
Concept tested: Penetration testing definition
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/governance-risk-compliance-penetration-tests
Topics
Community Discussion
No community discussion yet for this question.