PT0-002 · Question #548
Which of the following approaches would be the most appropriate for a penetration tester who is doing a one-week timeboxed assessment for a large electronics retail business with hundreds of…
The correct answer is B. Testing on a limited sample of retail locations. In a timeboxed assessment (limited to one week), it is not practical to thoroughly test every location of a large business with hundreds of locations worldwide. Instead, the penetration tester should focus on a representative sample of retail locations that capture the…
Question
Which of the following approaches would be the most appropriate for a penetration tester who is doing a one-week timeboxed assessment for a large electronics retail business with hundreds of locations around the world?
Options
- ATesting virtually with no on-site activities
- BTesting on a limited sample of retail locations
- CTesting on site for every retail location
- DTesting on site for 50% of the retail locations
How the community answered
(22 responses)- A5% (1)
- B77% (17)
- C5% (1)
- D14% (3)
Explanation
In a timeboxed assessment (limited to one week), it is not practical to thoroughly test every location of a large business with hundreds of locations worldwide. Instead, the penetration tester should focus on a representative sample of retail locations that capture the diversity of the organization's environment, such as different geographical locations, infrastructure setups, and configurations. This approach balances efficiency with effectiveness by identifying vulnerabilities that are likely present across multiple sites.
Topics
Community Discussion
No community discussion yet for this question.