MSIS 4123: MOD 18 STUDY GUIDE
vulnerability mapping - Answers - matching found services, ports and o/s to known
vulnerabilities during a pen test
vulnerability assessment - Answers - process of identifying, quantifying and prioritizing
the vulnerabilities in a system
Pen testing - Answers - includes vulnerability assessment, remediation and reporting of
networks and computers
ethical hacking - Answers - broad term for the "good" use of hacker tools and processes
WHOIS - Answers - a specific internet service offered by places like GODaddy that may
reveal information about the owner of an internet domain name
zero knowledge test - Answers - a pen test oriented toward a hacker view would use a
Pen Testing Scanning - Answers - uses programs like NMAP and NESSUS as part of
the discovery process
Pen Testing Enumeration - Answers - an aggressive search requiring an active
connection and directed queries
Pen testing footprinting - Answers - is a passive process of gathering knowledge about
an organization
full knowledge test - Answers - a pen test oriented toward and insider or employee view
would likely use
Pen Test Steps - Answers - 1. Business and Legal
2. Vulnerability Test
3. Vulnerability Analysis
4. Remediation
system accreditation - Answers - process of ensuring that a system meets the security
requirements of its domain
rules of behavior - Answers - guidelines for how an ethical hacker will conduct a pen
test
CEH - Answers - Certification offered by EC-Council
CVE - Answers - Database of known vulnerabilities
vulnerability mapping - Answers - matching found services, ports and o/s to known
vulnerabilities during a pen test
vulnerability assessment - Answers - process of identifying, quantifying and prioritizing
the vulnerabilities in a system
Pen testing - Answers - includes vulnerability assessment, remediation and reporting of
networks and computers
ethical hacking - Answers - broad term for the "good" use of hacker tools and processes
WHOIS - Answers - a specific internet service offered by places like GODaddy that may
reveal information about the owner of an internet domain name
zero knowledge test - Answers - a pen test oriented toward a hacker view would use a
Pen Testing Scanning - Answers - uses programs like NMAP and NESSUS as part of
the discovery process
Pen Testing Enumeration - Answers - an aggressive search requiring an active
connection and directed queries
Pen testing footprinting - Answers - is a passive process of gathering knowledge about
an organization
full knowledge test - Answers - a pen test oriented toward and insider or employee view
would likely use
Pen Test Steps - Answers - 1. Business and Legal
2. Vulnerability Test
3. Vulnerability Analysis
4. Remediation
system accreditation - Answers - process of ensuring that a system meets the security
requirements of its domain
rules of behavior - Answers - guidelines for how an ethical hacker will conduct a pen
test
CEH - Answers - Certification offered by EC-Council
CVE - Answers - Database of known vulnerabilities
