CIT484 chapter 2 Questions with
complete solution 2026/2027
Which of the following BEST describes an unknown penetration test
The penetration tester is given full knowledge of the network.
The penetration tester is given partial information about the target or network.
The penetration tester simulates an insider threat.
The penetration tester has no information regarding the target or network. - correct answer ✔The
penetration tester has no information regarding the target or network.
Which type of test simulates an insider threat by giving the tester partial information about the network
and computer systems
Penetration
Known
Unknown
Partially known - correct answer ✔Partially known
Which type of testing is typically done by an internal tester who has full knowledge of the network,
computer system, and infrastructure?
Known
Penetration
Partially known
Unknown - correct answer ✔Known
, Threats are usually ranked from high to low. A higher number indicates a dangerous threat. A lower
number indicates threats that may be annoyances but aren't necessarily malicious in nature. What is
this high-to-low scale known as?
Indicator standards
Intelligence cycle
Confidence level
InfraGard - correct answer ✔Confidence level
There are five phases in the security intelligence life cycle. During which phase do you gather and
process information from your internal sources, such as system and application logs?
Collection
Requirements
Dissemination
Feedback - correct answer ✔Collection
Which type of intelligence helps security professionals respond to incidents or make decisions on the
spot?
Correct Answer:
Data intelligence
Tactical intelligence
Strategic intelligence
Operational intelligence - correct answer ✔Tactical intelligence
complete solution 2026/2027
Which of the following BEST describes an unknown penetration test
The penetration tester is given full knowledge of the network.
The penetration tester is given partial information about the target or network.
The penetration tester simulates an insider threat.
The penetration tester has no information regarding the target or network. - correct answer ✔The
penetration tester has no information regarding the target or network.
Which type of test simulates an insider threat by giving the tester partial information about the network
and computer systems
Penetration
Known
Unknown
Partially known - correct answer ✔Partially known
Which type of testing is typically done by an internal tester who has full knowledge of the network,
computer system, and infrastructure?
Known
Penetration
Partially known
Unknown - correct answer ✔Known
, Threats are usually ranked from high to low. A higher number indicates a dangerous threat. A lower
number indicates threats that may be annoyances but aren't necessarily malicious in nature. What is
this high-to-low scale known as?
Indicator standards
Intelligence cycle
Confidence level
InfraGard - correct answer ✔Confidence level
There are five phases in the security intelligence life cycle. During which phase do you gather and
process information from your internal sources, such as system and application logs?
Collection
Requirements
Dissemination
Feedback - correct answer ✔Collection
Which type of intelligence helps security professionals respond to incidents or make decisions on the
spot?
Correct Answer:
Data intelligence
Tactical intelligence
Strategic intelligence
Operational intelligence - correct answer ✔Tactical intelligence
