Practice Reporting (2.5) - Penetration Testing & Red Teaming

Practise this section

9 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
3 questions · about 2 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What are the key components of a penetration testing report?
Show hintHide hint
Think about what stakeholders would need to know.
Question 2.
Why is it important to have a risk rating for each finding?
Show hintHide hint
Consider how organizations allocate resources.
3Question 3.
What should be the first component of any penetration testing report?
- Findings
- Executive Summary
- Recommendations
Show hintHide hint
It should be non-technical.
4Question 4.
True or False: A risk rating should not be included with findings in a report.
- True
- False
Show hintHide hint
Consider how risk impacts decision-making.
Question 5.
You have been given a set of vulnerabilities found in a client's system. How would you prioritize which vulnerabilities to report first?
Show hintHide hint
Consider which vulnerabilities pose the greatest risk to the client.
Question 6.
Draft a short executive summary for a fictional penetration test addressing a company’s vulnerability in their web application.
Show hintHide hint
Focus on non-technical language and summary of findings.

5 more questions in this section. Enroll free to practise them all.