Practice · Certified Penetration Testing Professional (C|PENT)

~/eccouncil-cpent · eccouncil-cpent_d1_6234e55ee432 ▊

← Certified Penetration Testing Professional (C|PENT) · practice sheet

eccouncil-cpent_d1_6234e55ee432 domain/d1 · medium single

A junior analyst confuses two related security activities. She uses tools to identify, categorize, and evaluate weak points in a system, then reports these findings as confirmed exploitable threats without further action. According to the distinction drawn in the source material, what did she actually perform, and what did she omit?

A She performed penetration testing but omitted vulnerability categorization
B She performed a vulnerability assessment but omitted actively exploiting the vulnerabilities to assess their severity and authenticity
C She performed a penetration test but omitted the reporting phase
D She performed both a vulnerability assessment and penetration test correctly

Unlock this exam to join the per-question discussion and vote on questions.

next question →