PT0-001 · Question #213
Which of the following BEST describes the difference between a red team engagement and a penetration test?
The correct answer is D. A penetration test has a broad scope and focuses more on vulnerability identification while a red. Penetration tests are broad and vulnerability-focused, while red team engagements are narrow and objective-driven, emulating sophisticated threat actors.
Question
Which of the following BEST describes the difference between a red team engagement and a penetration test?
Options
- AA penetration test has a broad scope and emulates advanced persistent threats while a red team
- BA red team engagement has a broad scope and emulates advanced persistent threats, while a
- CA red team engagement has a broad scope and focuses more on vulnerability identification, while
- DA penetration test has a broad scope and focuses more on vulnerability identification while a red
How the community answered
(21 responses)- C5% (1)
- D95% (20)
Why each option
Penetration tests are broad and vulnerability-focused, while red team engagements are narrow and objective-driven, emulating sophisticated threat actors.
This reverses the definitions - it incorrectly attributes APT emulation and broad scope to the penetration test rather than the red team.
Red team engagements are explicitly narrow and objective-focused, not broad; broad scope belongs to penetration tests.
Red team engagements do not focus on vulnerability identification - comprehensive vulnerability discovery is the purpose of a penetration test, not a red team exercise.
A penetration test is designed to maximize coverage, systematically identifying and exploiting as many vulnerabilities as possible across the target environment. A red team engagement, by contrast, operates with a narrow, goal-oriented scope that simulates a realistic advanced persistent threat - testing detection capabilities, response procedures, and the ability to achieve a specific objective such as data exfiltration or lateral movement to a crown jewel asset.
Concept tested: Red team vs penetration test scope and methodology differences
Source: https://csrc.nist.gov/glossary/term/red_team_exercise
Topics
Community Discussion
No community discussion yet for this question.