ECSAv10 Penetration Practice Questions

You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

• AA. Use attack as a launching point to penetrate deeper into the network
• BB. Demonstrate that no system can be protected against DoS attacks
• CC. List weak points on their network
• DD. Show outdated equipment so it can be replaced

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

• AA. Sunbelt Network Security Inspector (SNSI)
• BB. CORE Impact
• CC. Canvas
• DD. Microsoft Baseline Security Analyzer (MBSA)