PENETRATION TESTING AND VULNERABILITY ANALYSIS - D332 (PENTEST+ PTO-002)
WGU LATEST UPDATE 2025!!
Which statements are true with respect to the process of passively testing security
controls?
1.) Involves running security devices in Monitor Only mode.
2.) A more invasive process to daily employee productivity.
3.) Comprises scanning and snooping tools to gather information for analysis.
4.) Utilizes intrusion prevention as opposed to intrusion detection.
5.) Most firewalls can use packet tracer capabilities. - (answer)1.) Involves running security
devices in Monitor Only mode.
3.) Comprises scanning and snooping tools to gather information for analysis.
5.) Most firewalls can use packet tracer capabilities.
Match the network security testing type with the characteristics:
A.) Intrusive
B.) Non-intrusive
1.) Promiscuous.
2.) Packet Sniffing.
3.) Social Engineering.
4.) Inline.
5.) Active.
6.) Passive - (answer)1.) Promiscuous - Non-Intrusive
2.) Packet Sniffing - Non-Intrusive
3.) Social Engineering - Non-Intrusive
4.) Inline - Intrusive
5.) Active - Intrusive
6.) Passive - Non-Intrusive
, PENETRATION TESTING AND VULNERABILITY ANALYSIS - D332 (PENTEST+ PTO-002)
WGU LATEST UPDATE 2025!!
Which of the following best represents an example of passive reconnaissance?
1.) Vulnerability scanning.
2.) Port and address scanning.
3.) Data mining social networks.
4.) Banner grabbing.
5.) Web application scanning. - (answer)3.) Data mining social networks.
After which one of the following system events would malicious code or scripts most
likely not be persistent?
1.) Reboot.
2.) AV Scan.
3.) Network Disconnect.
4.) Logoff. - (answer)2.) AV Scan.
Which statement concerning pen testing and vulnerability scanning comparisons is false?
1.) Vulnerability scanning is easier and more focused on looking for unpatched systems.
2.) Pen testing is a thorough investigation and ethical attempt to exploit vulnerabilities.
3.) Pen testing is a more manual activity often taking several days.
4.) Vulnerability scanning is rarely automated and can take days to complete. - (answer)4.)
Vulnerability scanning is rarely automated and can take days to complete.
Match the application testing type with the characteristics.
A.) White box.
B.) Gray box.
WGU LATEST UPDATE 2025!!
Which statements are true with respect to the process of passively testing security
controls?
1.) Involves running security devices in Monitor Only mode.
2.) A more invasive process to daily employee productivity.
3.) Comprises scanning and snooping tools to gather information for analysis.
4.) Utilizes intrusion prevention as opposed to intrusion detection.
5.) Most firewalls can use packet tracer capabilities. - (answer)1.) Involves running security
devices in Monitor Only mode.
3.) Comprises scanning and snooping tools to gather information for analysis.
5.) Most firewalls can use packet tracer capabilities.
Match the network security testing type with the characteristics:
A.) Intrusive
B.) Non-intrusive
1.) Promiscuous.
2.) Packet Sniffing.
3.) Social Engineering.
4.) Inline.
5.) Active.
6.) Passive - (answer)1.) Promiscuous - Non-Intrusive
2.) Packet Sniffing - Non-Intrusive
3.) Social Engineering - Non-Intrusive
4.) Inline - Intrusive
5.) Active - Intrusive
6.) Passive - Non-Intrusive
, PENETRATION TESTING AND VULNERABILITY ANALYSIS - D332 (PENTEST+ PTO-002)
WGU LATEST UPDATE 2025!!
Which of the following best represents an example of passive reconnaissance?
1.) Vulnerability scanning.
2.) Port and address scanning.
3.) Data mining social networks.
4.) Banner grabbing.
5.) Web application scanning. - (answer)3.) Data mining social networks.
After which one of the following system events would malicious code or scripts most
likely not be persistent?
1.) Reboot.
2.) AV Scan.
3.) Network Disconnect.
4.) Logoff. - (answer)2.) AV Scan.
Which statement concerning pen testing and vulnerability scanning comparisons is false?
1.) Vulnerability scanning is easier and more focused on looking for unpatched systems.
2.) Pen testing is a thorough investigation and ethical attempt to exploit vulnerabilities.
3.) Pen testing is a more manual activity often taking several days.
4.) Vulnerability scanning is rarely automated and can take days to complete. - (answer)4.)
Vulnerability scanning is rarely automated and can take days to complete.
Match the application testing type with the characteristics.
A.) White box.
B.) Gray box.
