nerdexam
CompTIA

CV0-002 · Question #78

The system administrator created a file sharing service to the cloud for easier access for those working remotely. Which of the following tests should be performed to determine if services can be…

The correct answer is D. Penetration testing. To determine if a newly deployed cloud file sharing service can be compromised, a penetration test is the most appropriate method as it actively simulates real-world attacks.

Security

Question

The system administrator created a file sharing service to the cloud for easier access for those working remotely. Which of the following tests should be performed to determine if services can be compromised?

Options

  • ATest storage
  • BTest latency
  • CVulnerability assessment
  • DPenetration testing

How the community answered

(60 responses)
  • A
    2% (1)
  • B
    3% (2)
  • C
    7% (4)
  • D
    88% (53)

Why each option

To determine if a newly deployed cloud file sharing service can be compromised, a penetration test is the most appropriate method as it actively simulates real-world attacks.

ATest storage

Testing storage typically involves verifying capacity, performance, and data integrity, not directly assessing security vulnerabilities or exploitability.

BTest latency

Testing latency measures network delay and responsiveness, which is a performance metric and not a security assessment to find compromises.

CVulnerability assessment

A vulnerability assessment identifies potential security weaknesses but does not actively attempt to exploit them to determine if services can be compromised.

DPenetration testingCorrect

Penetration testing actively exploits identified vulnerabilities to determine the extent to which a system can be compromised, providing a realistic assessment of its security posture by attempting to breach the service's defenses.

Concept tested: Penetration testing vs. vulnerability assessment

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing

Topics

#penetration testing#vulnerability assessment#cloud security#attack simulation

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice