Practice · GIAC Red Team Professional

~/giac-grtp · giac-grtp_d1_334044edbe3c ▊

← GIAC Red Team Professional · practice sheet

giac-grtp_d1_334044edbe3c domain/d1 · medium single

A security manager questions why the organization should invest in adversary emulation rather than continuing with only traditional penetration testing. Which distinction best describes the added value that adversary emulation provides over conventional penetration testing?

A Penetration testing enumerates vulnerabilities but is less effective at maturing defenders' ability to detect and respond to attacks
B Penetration testing produces higher-fidelity network diagrams than adversary emulation
C Adversary emulation avoids exploiting systems and focuses only on documentation
D Penetration testing is goal-oriented while adversary emulation is scope-limited

Unlock this exam to join the per-question discussion and vote on questions.

next question →