Appendix A

Answers to Chapter Multiple Choice Questions

Chapter 1

Multiple Choice Questions

1. Answer: A. A black box test is a test wherein the tester gets the absolute minimum information.

Answer B is incorrect because a gray box test would indicate some information was given.Answers C and D are not penetration tests so they are incorrect.

2. Answer: A. 18 USC 2701 is about access devices. The other USC, federal laws, cover other aspects of computer law and are thus not the correct answer.

3. Answer: C. A security audit is primarily about reports, policies, and document review.

Answers A and D are incorrect because they are penetration tests and require actual attempts to breach the system.

Answer B is incorrect because a vulnerability assessment ...

Get Penetration Testing Fundamentals: A Hands-On Guide to Reliable Security Audits now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.