Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
Solution and Answer Guide
WILSON, COMPTIA PENTEST+ GUIDE TO PENETRATION TESTING 2e 2027, 9798214410180;
CHAPTER 1: INTRODUCTION TO PENETRATION TESTING
TABLE OF CONTENTS
Review Questions..........................................................................................................1
Activities........................................................................................................................4
Activity 1-1: Determining the Corporate Need for Penetration Testers....................................................4
Activity 1-2: Examining the Top 25 Most Dangerous Programming Errors.............................................4
Activity 1-3: Identifying Computer Statutes in Your State, Province, or County.....................................4
Activity 1-4: Examining Federal and International Computer Crime Laws..............................................5
Case Projects.................................................................................................................5
Case Project 1-1: Determining Legal Requirements for Penetration Testing............................................5
Case Project 1-2: Researching Hacktivists at Work.................................................................................. 6
REVIEW QUESTIONS
1. What are two other terms for penetration testing?
a. Vulnerability testing
b. Pen testing
c. Ethical hacking
d. Blue teaming
Answer: b, c
Penetration testing is also known as pen testing or ethical hacking and is an authorized series of
security-related, nonmalicious “attacks” on targets such as computing devices, applications, or an
organization’s physical resources and personnel.
2. The purpose of pen testing is to discover vulnerabilities in targets so that these vulnerabilities can be
eliminated or mitigated.
a. True
b. False
Answer: a
The purpose of pen testing is to discover vulnerabilities in targets so that the vulnerabilities can be
eliminated or mitigated before a threat actor with malicious intent exploits them to cause damage to
systems, data, and the organization that owns them.
3. Pen testing should be performed under which of the following circumstances? Choose all that apply.
a. A new computer system has been installed.
b. A new software system or an update to a software system has been installed.
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 1
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
c. Following a regular schedule to make sure no unknown changes have impacted security.
d. Performed as dictated by compliance standards such as PCI DSS.
Answer: a, b, c, d
Pen testing should be performed as a regular practice, to meet compliance standards, and after a major
change in a computing environment, such as the installation of a new computer system, application, or
update.
4. Which of the following are possible targets for penetration testing?
a. Web application
b. Computer
c. Staff
d. All of these are correct
Answer: d
Web applications and other software, computers and related systems, and staff or other personnel can
be targets for penetration testing.
5. The targets under test and the actions that a pen tester is allowed to perform need to be well-defined,
documented, and agreed upon by all parties before pen testing begins.
a. True
b. False
Answer: a
Because pen-testing activities are the same as illegal hacking activities, though with different goals, the
pen-testing targets and actions must be well-defined, documented, and agreed upon by all parties
before pen testing begins.
6. The CIA triad expresses how the cornerstones of confidentiality, integrity, and accessibility are linked
together to provide security for computer systems and their data.
c. True
d. False
Answer: a
In the CIA triad, confidentiality of information dictates that an object should only be accessible to
authorized entities. Integrity of information or systems ensures that an object has not been corrupted or
destroyed by unauthorized entities. Availability requires that objects and services must be accessible to
authorized entities when needed and should not be made unavailable by threat actors or system
failures.
7. Which of the following are needed to properly maintain the ethical hacking mindset?
a. Pen testers must be careful to conduct themselves ethically with professionalism and integrity.
b. Pen testers must not accidentally stray into the realm of the malicious hacker and cause damage to
systems or data.
c. Pen testers must do no harm and stay within the boundaries of what activities have been specified
and sanctioned in the penetration testing agreement documents.
d. All of these are correct.
Answer: d
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 2
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
Pen testers must conduct themselves ethically with professionalism and integrity, cannot accidentally
stray into the realm of the malicious hacker and cause damage to systems or data, and must do no harm
by staying within the boundaries of the specified activities.
8. Which penetration testing team is responsible for launching “authorized attacks” against an organization’s
resources/targets?
a. Red team
b. Blue team
c. Purple team
d. Other stakeholders
Answer: a
The red team launches authorized attacks against an organization’s resources or targets to discover
vulnerabilities and prove a vulnerability exists.
9. Which phase of the pen-testing process includes activities such as active reconnaissance, vulnerability
scanning, and social engineering?
a. Planning and scoping
b. Information gathering and vulnerability scanning
c. Attacking and exploiting
d. Reporting and communicating results
Answer: b
The information gathering and vulnerability scanning phase includes active reconnaissance (also called
footprinting), vulnerability scanning and analysis, and social engineering.
10. Which phase of the pen-testing process includes activities such as getting written authorization,
determining targets, defining goals, and building teams?
a. Planning and scoping
b. Information gathering and vulnerability scanning
c. Attacking and exploiting
d. Reporting and communicating results
Answer: a
The planning and scoping phase lays the groundwork for all the activities that follow and includes
securing written authorization, determining targets, defining goals, and building teams.
11. Using your favorite search engine, search for security products that use the cyber kill chain concept. In a
one-page report, describe one of these products and its features. Be sure to highlight the product’s
capabilities and how they relate to specific cyber kill chain phases.
Answers will vary, but a good report will be exactly one-page long and will cover the requirements of
naming the product, describing its features and capabilities, and relating these to the cyber kill chain
phases.
12. Choose one of the tools from Table 1-3: Penetration-testing tools and create a one-page report detailing
what the tool does and how to use it. Include one small graphic that exemplifies this tool. The graphic can
be no more than 1/6 of a page in size.
Answers will vary, but a good report will be exactly one page long and will describe what the tool is
used for and how to use it. Good reports will contain one small graphic that shows the tool’s interface
or a command line capture of it being used.
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 3
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
13. Use your favorite search engine to research bug bounties. Find three different bug bounties that were paid,
and in a one-page report, summarize these bounties. Make sure to include the vulnerability details, the
organization that paid the bounty, and how much they paid.
Answers will vary, but a good report will follow the instructions and have exactly three bug bounty
examples. It will also describe the vulnerability details, the organization that paid the bounty, and the
amount.
ACTIVITIES
ACTIVITY 1-1: DETERMINING THE CORPORATE NEED FOR
PENETRATION TESTERS
Solution: This activity has no deliverables. Depending on the city entered for the search anywhere from a
few to dozens of job listings should be returned. The job descriptions should cover a variety of pen testing
activities, some of which may be part of a larger job scope such as Software Engineer or Security Analyst.
ACTIVITY 1-2: EXAMINING THE TOP 25 MOST DANGEROUS
PROGRAMMING ERRORS
Solution: This activity has no deliverables. When the reader successfully reaches the Top 25 list, the list
should include weaknesses such as: cross-site scripting, SQL Injection, Command Inject, and Path
Traversal.
ACTIVITY 1-3: IDENTIFYING COMPUTER STATUTES IN YOUR STATE,
PROVINCE, OR COUNTY
Solution: Answers will vary. The memo should include state laws that might affect how a penetration
test could be conducted as well as problems that might arise because of state laws. The memo could also
ask that management draw up a contract addressing any risks or possible network degradation that might
occur during testing.
ACTIVITY 1-4: EXAMINING FEDERAL AND INTERNATIONAL
COMPUTER CRIME LAWS
Solution: Answers will vary. The summary should mention some key elements, such as (a)(2) “…
intentionally accesses a computer without authorization or exceeds authorized access, and thereby
obtains….” Section (g) states: “Any person who suffers damage or loss by reason of a violation of this
section may maintain a civil action against the violator…” The summary might also mention the possibility
of a lawsuit. Students need to understand that this federal law addresses government computers and
financial systems. Students should mention what nations are part of The Convention on Cybercrime
(Budapest Convention).
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 4
in whole or in part.
Chapter 1: Introduction to Penetration Testing
Solution and Answer Guide
WILSON, COMPTIA PENTEST+ GUIDE TO PENETRATION TESTING 2e 2027, 9798214410180;
CHAPTER 1: INTRODUCTION TO PENETRATION TESTING
TABLE OF CONTENTS
Review Questions..........................................................................................................1
Activities........................................................................................................................4
Activity 1-1: Determining the Corporate Need for Penetration Testers....................................................4
Activity 1-2: Examining the Top 25 Most Dangerous Programming Errors.............................................4
Activity 1-3: Identifying Computer Statutes in Your State, Province, or County.....................................4
Activity 1-4: Examining Federal and International Computer Crime Laws..............................................5
Case Projects.................................................................................................................5
Case Project 1-1: Determining Legal Requirements for Penetration Testing............................................5
Case Project 1-2: Researching Hacktivists at Work.................................................................................. 6
REVIEW QUESTIONS
1. What are two other terms for penetration testing?
a. Vulnerability testing
b. Pen testing
c. Ethical hacking
d. Blue teaming
Answer: b, c
Penetration testing is also known as pen testing or ethical hacking and is an authorized series of
security-related, nonmalicious “attacks” on targets such as computing devices, applications, or an
organization’s physical resources and personnel.
2. The purpose of pen testing is to discover vulnerabilities in targets so that these vulnerabilities can be
eliminated or mitigated.
a. True
b. False
Answer: a
The purpose of pen testing is to discover vulnerabilities in targets so that the vulnerabilities can be
eliminated or mitigated before a threat actor with malicious intent exploits them to cause damage to
systems, data, and the organization that owns them.
3. Pen testing should be performed under which of the following circumstances? Choose all that apply.
a. A new computer system has been installed.
b. A new software system or an update to a software system has been installed.
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 1
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
c. Following a regular schedule to make sure no unknown changes have impacted security.
d. Performed as dictated by compliance standards such as PCI DSS.
Answer: a, b, c, d
Pen testing should be performed as a regular practice, to meet compliance standards, and after a major
change in a computing environment, such as the installation of a new computer system, application, or
update.
4. Which of the following are possible targets for penetration testing?
a. Web application
b. Computer
c. Staff
d. All of these are correct
Answer: d
Web applications and other software, computers and related systems, and staff or other personnel can
be targets for penetration testing.
5. The targets under test and the actions that a pen tester is allowed to perform need to be well-defined,
documented, and agreed upon by all parties before pen testing begins.
a. True
b. False
Answer: a
Because pen-testing activities are the same as illegal hacking activities, though with different goals, the
pen-testing targets and actions must be well-defined, documented, and agreed upon by all parties
before pen testing begins.
6. The CIA triad expresses how the cornerstones of confidentiality, integrity, and accessibility are linked
together to provide security for computer systems and their data.
c. True
d. False
Answer: a
In the CIA triad, confidentiality of information dictates that an object should only be accessible to
authorized entities. Integrity of information or systems ensures that an object has not been corrupted or
destroyed by unauthorized entities. Availability requires that objects and services must be accessible to
authorized entities when needed and should not be made unavailable by threat actors or system
failures.
7. Which of the following are needed to properly maintain the ethical hacking mindset?
a. Pen testers must be careful to conduct themselves ethically with professionalism and integrity.
b. Pen testers must not accidentally stray into the realm of the malicious hacker and cause damage to
systems or data.
c. Pen testers must do no harm and stay within the boundaries of what activities have been specified
and sanctioned in the penetration testing agreement documents.
d. All of these are correct.
Answer: d
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 2
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
Pen testers must conduct themselves ethically with professionalism and integrity, cannot accidentally
stray into the realm of the malicious hacker and cause damage to systems or data, and must do no harm
by staying within the boundaries of the specified activities.
8. Which penetration testing team is responsible for launching “authorized attacks” against an organization’s
resources/targets?
a. Red team
b. Blue team
c. Purple team
d. Other stakeholders
Answer: a
The red team launches authorized attacks against an organization’s resources or targets to discover
vulnerabilities and prove a vulnerability exists.
9. Which phase of the pen-testing process includes activities such as active reconnaissance, vulnerability
scanning, and social engineering?
a. Planning and scoping
b. Information gathering and vulnerability scanning
c. Attacking and exploiting
d. Reporting and communicating results
Answer: b
The information gathering and vulnerability scanning phase includes active reconnaissance (also called
footprinting), vulnerability scanning and analysis, and social engineering.
10. Which phase of the pen-testing process includes activities such as getting written authorization,
determining targets, defining goals, and building teams?
a. Planning and scoping
b. Information gathering and vulnerability scanning
c. Attacking and exploiting
d. Reporting and communicating results
Answer: a
The planning and scoping phase lays the groundwork for all the activities that follow and includes
securing written authorization, determining targets, defining goals, and building teams.
11. Using your favorite search engine, search for security products that use the cyber kill chain concept. In a
one-page report, describe one of these products and its features. Be sure to highlight the product’s
capabilities and how they relate to specific cyber kill chain phases.
Answers will vary, but a good report will be exactly one-page long and will cover the requirements of
naming the product, describing its features and capabilities, and relating these to the cyber kill chain
phases.
12. Choose one of the tools from Table 1-3: Penetration-testing tools and create a one-page report detailing
what the tool does and how to use it. Include one small graphic that exemplifies this tool. The graphic can
be no more than 1/6 of a page in size.
Answers will vary, but a good report will be exactly one page long and will describe what the tool is
used for and how to use it. Good reports will contain one small graphic that shows the tool’s interface
or a command line capture of it being used.
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 3
in whole or in part.
, Solution and Answer Guide: Wilson, PenTest+ Guide to Penetration Testing 2e 2027, 9798214410180;
Chapter 1: Introduction to Penetration Testing
13. Use your favorite search engine to research bug bounties. Find three different bug bounties that were paid,
and in a one-page report, summarize these bounties. Make sure to include the vulnerability details, the
organization that paid the bounty, and how much they paid.
Answers will vary, but a good report will follow the instructions and have exactly three bug bounty
examples. It will also describe the vulnerability details, the organization that paid the bounty, and the
amount.
ACTIVITIES
ACTIVITY 1-1: DETERMINING THE CORPORATE NEED FOR
PENETRATION TESTERS
Solution: This activity has no deliverables. Depending on the city entered for the search anywhere from a
few to dozens of job listings should be returned. The job descriptions should cover a variety of pen testing
activities, some of which may be part of a larger job scope such as Software Engineer or Security Analyst.
ACTIVITY 1-2: EXAMINING THE TOP 25 MOST DANGEROUS
PROGRAMMING ERRORS
Solution: This activity has no deliverables. When the reader successfully reaches the Top 25 list, the list
should include weaknesses such as: cross-site scripting, SQL Injection, Command Inject, and Path
Traversal.
ACTIVITY 1-3: IDENTIFYING COMPUTER STATUTES IN YOUR STATE,
PROVINCE, OR COUNTY
Solution: Answers will vary. The memo should include state laws that might affect how a penetration
test could be conducted as well as problems that might arise because of state laws. The memo could also
ask that management draw up a contract addressing any risks or possible network degradation that might
occur during testing.
ACTIVITY 1-4: EXAMINING FEDERAL AND INTERNATIONAL
COMPUTER CRIME LAWS
Solution: Answers will vary. The summary should mention some key elements, such as (a)(2) “…
intentionally accesses a computer without authorization or exceeds authorized access, and thereby
obtains….” Section (g) states: “Any person who suffers damage or loss by reason of a violation of this
section may maintain a civil action against the violator…” The summary might also mention the possibility
of a lawsuit. Students need to understand that this federal law addresses government computers and
financial systems. Students should mention what nations are part of The Convention on Cybercrime
(Budapest Convention).
© 2027 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, 4
in whole or in part.
