Ethical Hacking: Penetration Testing Methodology Quiz

Quiz: Reporting and Ethics

Pass mark: 70%. You can retry as many times as you need.

1 Why do many experienced testers consider report writing their most important skill? Single answer Because a poorly explained finding, however technically impressive, is likely to be ignored or misunderstood Because clients never read the technical findings section at all Because reports are legally required to be longer than the technical testing itself

2 Which elements should each individual finding in a professional report include? (several answers) Multiple answers possible A specific, descriptive title naming the actual issue A severity level grounded in both technical and business factors A specific, actionable recommendation connected to the finding A vague statement that something 'should be fixed soon'

3 When presenting findings to a mixed audience of executives and technical staff, what is the recommended approach? Single answer Always use the same deeply technical language regardless of audience Adapt the explanation to each audience while keeping the underlying facts and severity unchanged Only present findings to executives, since technical staff already know everything

4 During an authorised test, you find clear evidence that an unrelated, real attacker already has active unauthorised access to the system. What is the correct immediate action? Single answer Continue testing as planned, since the scope already authorises activity on this system Attempt to remove the other party's access yourself before continuing Stop testing that area, document the observation, and escalate immediately to the client contact

5 A client says informally, 'don't worry about the formal scope update, just go ahead and test the new system too, I trust you.' What is the correct response? Single answer Proceed immediately, since the client has clearly expressed trust and permission Politely request a written scope update before testing the new system Refuse to ever test the new system under any circumstances