White Hat Apprentice: From Lab to Professional Report Quiz

Quiz: Red Team vs Blue Team

Pass mark: 70%. You can retry as many times as you need.

1 What is the main difference between a classic penetration test and a red team exercise? Single answer A pentest is always illegal without the client knowing, while a red team is not A red team does not need written authorization They are the same activity with different names A red team tests whether critical objectives can be reached and whether the defenders notice, rather than listing every weakness

2 What roles does the white cell play in a red team exercise? (several answers) Multiple answers possible It knows about the exercise and keeps it within the agreed rules It helps tell the difference between the exercise and a real attack It carries out the attacks without telling the red team It can decide to pause or stop the exercise for safety reasons

3 A SOC receives thousands of alerts a day, most of them false. Which is the best reaction? Single answer Tune the rules, add context and prioritize by business impact Ask analysts to ignore alerts that look repetitive Disable the monitoring tool to reduce noise Close all alerts automatically after 24 hours

4 In a purple team cycle, a technique is executed in the lab and logs exist but no alert fires. What is the next step? Single answer Mark it as detected because the logs exist Create or tune a detection, then retest the same behavior and document the result Stop testing this technique, since it cannot be detected Run the technique on a production server to see more logs

5 Which elements belong in the preparation of a safe supervised exercise? (several answers) Multiple answers possible A written authorization with defined scope and exclusions Informing nobody at all, including the people who could stop the exercise in an emergency A stop procedure and emergency contacts An agreed debrief and a tracked list of follow-up actions Permission to test any partner system that seems connected to the target