Practice Frameworks (3.2) - Penetration Testing & Red Teaming

Practise this section

11 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
5 questions · about 3 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does OSSTMM stand for?
Show hintHide hint
It's an acronym related to security testing.
Question 2.
What type of information can you find in the MITRE ATT&CK framework?
Show hintHide hint
Think about what attackers might do.
3Question 3.
What is the main focus of OSSTMM?
- Vulnerability scanning
- Metric-driven security testing
- User training
Show hintHide hint
Think about how OSSTMM helps quantify security.
4Question 4.
Does the MITRE ATT&CK framework provide guidelines for creating security policies?
- True
- False
Show hintHide hint
Consider what the framework is primarily used for.
Question 5.
Given a scenario where an organization has faced repeated phishing attacks, design a penetration test strategy using both OSSTMM and MITRE ATT&CK frameworks.
Show hintHide hint
Think about integrating metrics from OSSTMM with real-world attack scenarios.
Question 6.
Discuss how documenting findings within the OSSTMM framework can impact an organization's long-term security strategy.
Show hintHide hint
Consider the role documentation plays in learning and adapting.

7 more questions in this section. Enroll free to practise them all.