nerdexam
CompTIA

PT0-001 · Question #213

Which of the following BEST describes the difference between a red team engagement and a penetration test?

The correct answer is D. A penetration test has a broad scope and focuses more on vulnerability identification while a red. Penetration tests are broad and vulnerability-focused, while red team engagements are narrow and objective-driven, emulating sophisticated threat actors.

Engagement management

Question

Which of the following BEST describes the difference between a red team engagement and a penetration test?

Options

  • AA penetration test has a broad scope and emulates advanced persistent threats while a red team
  • BA red team engagement has a broad scope and emulates advanced persistent threats, while a
  • CA red team engagement has a broad scope and focuses more on vulnerability identification, while
  • DA penetration test has a broad scope and focuses more on vulnerability identification while a red

How the community answered

(21 responses)
  • C
    5% (1)
  • D
    95% (20)

Why each option

Penetration tests are broad and vulnerability-focused, while red team engagements are narrow and objective-driven, emulating sophisticated threat actors.

AA penetration test has a broad scope and emulates advanced persistent threats while a red team

This reverses the definitions - it incorrectly attributes APT emulation and broad scope to the penetration test rather than the red team.

BA red team engagement has a broad scope and emulates advanced persistent threats, while a

Red team engagements are explicitly narrow and objective-focused, not broad; broad scope belongs to penetration tests.

CA red team engagement has a broad scope and focuses more on vulnerability identification, while

Red team engagements do not focus on vulnerability identification - comprehensive vulnerability discovery is the purpose of a penetration test, not a red team exercise.

DA penetration test has a broad scope and focuses more on vulnerability identification while a redCorrect

A penetration test is designed to maximize coverage, systematically identifying and exploiting as many vulnerabilities as possible across the target environment. A red team engagement, by contrast, operates with a narrow, goal-oriented scope that simulates a realistic advanced persistent threat - testing detection capabilities, response procedures, and the ability to achieve a specific objective such as data exfiltration or lateral movement to a crown jewel asset.

Concept tested: Red team vs penetration test scope and methodology differences

Source: https://csrc.nist.gov/glossary/term/red_team_exercise

Topics

#red team#penetration testing#engagement scope#methodology

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice