Networks, Linux and Systems: The Technical Foundations of Cybersecurity Quiz

Quiz: Towards penetration testing

Pass mark: 70%. You can retry as many times as you need.

1 Which element is indispensable before any penetration test on a client's system? Single answer A written authorisation with a defined scope and rules of engagement. A verbal agreement from a friend of the owner. Having installed Kali Linux. Good intentions.

2 According to the French Code pénal (articles 323-1 to 323-7), which statements are correct? (several answers) Multiple answers possible Fraudulent access to or remaining in a system is an offence even if nothing is damaged. An attempt that fails can never be punished. Attempts are punished like the offence itself. Holding hacking tools can be an offence when there is no legitimate reason.

3 You find, while browsing a public website, that changing a number in the URL displays another customer's invoice. What is the most appropriate reaction? Single answer Try many more numbers to measure the extent of the problem, then publish it. Stop, avoid accessing further data, and report the flaw to the owner or to the national authority. Download all the invoices as proof. Ignore it and tell nobody.

4 Which of the following belong to passive reconnaissance? (several answers) Multiple answers possible Looking up an organisation's subdomains in certificate transparency logs. Running a port scan on the organisation's servers. Reading the public DNS records of a domain (MX, TXT, NS). Browsing archived versions of a public website.

5 In the PTES methodology, in which phase is the scope and the authorisation established? Single answer Exploitation Reporting Post-exploitation Pre-engagement interactions