Penetration Testing Flashcards

1️⃣ Familiarise yourself with the flashcards:

  • Look through all the flashcards to see what's on both sides.
  • Make sure you understand the information on each card. If something's unclear, click the link to the revision notes at the bottom of the page for more details.

2️⃣ Test yourself:

  • Look at the question or prompt on each card and try to remember the answer before flipping it over.
  • Check the answer and make a note of any cards you find challenging and need to go over more.

3️⃣ Consistently Review and Practice:

  • Use spaced repetition: spend more time on the cards you struggle with and go over them more often.
  • Regularly review all the flashcards to help you better understand and retain the information over time.

Note: We may include questions that have multiple correct answers. It's useful to remember specific examples to understand these concepts better.

PERSONALISED 1-TO-1 TUTORING

Need more help on this topic? Get 1-to-1 support

Get support with clear explanations, practice and feedback (Ages 5 to 16).

  • DBS-checked tutors
  • Flexible times
  • Parents can be updated

Want an ad-free experience? Subscribe to remove ads

What is penetration testing?

A legal test that safely tries to find security weaknesses in a system.

Why do organisations use penetration testing?

To find and fix weaknesses before criminals can use them.

What is the difference between black box and white box testing?

Black box: testers have no inside information. White box: testers have full information, such as code and network details.

What is the difference between external and internal penetration testing?

External testing is done from outside the network. Internal testing is done from inside the network or as a normal user.

What does the scope of a penetration test define?

Which systems are tested, what methods are allowed, and the time limits.

What must testers get before starting a penetration test?

Written permission from the owner and an agreed scope, to stay legal.

What are the main steps in a penetration test?

Plan the test, gather information, scan for flaws, try to use them safely, write a report.

What is the output of a penetration test?

A report that lists weaknesses, how serious they are, and how to fix them.

How is a penetration test different from a vulnerability scan?

A scan is mostly automated and lists possible issues. A penetration test is human-led and safely tries to use issues.

Name one risk of penetration testing.

It may disrupt services if not planned and controlled well.

Who usually performs a penetration test?

Trained, authorised security testers, either staff or hired specialists.

When might an organisation run a penetration test?

After big changes, before a launch, and at regular times.