English
Menu

Cyber Attacks and Defense in Practice

Which of the following correctly describes the differences between vulnerability scanning, penetration testing and red team exercises as ways of checking an organization's defenses?

  1. AAll three are different names for the same method, meaning using tools to find known vulnerabilities automatically and produce a list in a report
  2. BScanning finds known vulnerabilities broadly and automatically, penetration testing actually attempts intrusion, and red team exercises evaluate even the ability to detect and respond
  3. CA red team exercise is just the work of finding known vulnerabilities automatically with tools, and it is narrower in both scope and purpose than penetration testing
Show answer and explanation

Answer: B. Scanning finds known vulnerabilities broadly and automatically, penetration testing actually attempts intrusion, and red team exercises evaluate even the ability to detect and respond

Vulnerability scanning uses tools to examine many devices and pieces of software and broadly find known vulnerabilities and configuration flaws, and it is repeated regularly. Penetration testing checks, for targets within an agreed scope, whether specialists can actually break in by chaining vulnerabilities and how far they can get. A red team exercise sets an objective such as "exfiltrate customer data", imitates the methods of real attackers (such as ATT&CK techniques) and evaluates even whether the defending side (the blue team) notices and responds. All of them are carried out with the organization's prior permission on the scope and methods.

  • A. Their purposes and methods differ. Finding known vulnerabilities with tools is vulnerability scanning.
  • B. Correct. The purpose widens from broad discovery by scanning, to checking whether intrusion is possible, to testing detection and response.
  • C. A red team exercise imitates attackers to evaluate even the organization's detection and response; it is different from automated scanning.
Practice this topic Back to topic

Books on Cyber Attacks and Defense in Practice Ad

As an Amazon Associate I earn from qualifying purchases.

More Cyber Attacks and Defense in Practice questions

  1. An outside security researcher has found an undisclosed vulnerability in a company's product. Which of the following is the most appropriate way to proceed according to the idea of coordinated vulnerability disclosure?
  2. Which of the following is the main purpose of creating and maintaining an SBOM (software bill of materials)?
  3. A company uses an internal-only library named acme-utils, kept in its internal package repository (private registry). An attacker registered a package with the same name, acme-utils, and a higher version number in a public package repository, and it turned out that, depending on the build settings, the internal build environment could pull in the attacker's package. Which of the following is the most appropriate countermeasure to this "dependency confusion"?
  4. In the SolarWinds incident discovered in December 2020, attackers got into the build environment of IT management software and malicious code was mixed into legitimate updates. The updates were distributed carrying the developer's legitimate code signature. Which of the following is the most appropriate lesson from this incident?
  5. It was found that files containing customer information in cloud object storage could be read by anyone on the internet. Which of the following is an appropriate combination of a typical cause of this kind of leak and a measure to prevent recurrence?

Comparisons in this topic