MENU
Which approach is recommended by the CIS Controls for performing penetration tests?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
BR
Brett
11 months ago
I don't know, but A sounds too limiting to me!
TA
Taryn
11 months ago
D seems smart too, testing during maintenance makes sense.
LO
Loren
12 months ago
Wait, is it really C? I thought they preferred a more cautious approach.
FL
Florinda
12 months ago
Totally agree with C! That's the best way to find real issues.
HA
Han
12 months ago
I think it's C, right? Intrusive tests are key.
BE
Bernardine
1 year ago
I practiced a question similar to this, and I think documenting vulnerabilities is important, but I don't remember it being the main approach recommended by the CIS Controls.
GO
Goldie
1 year ago
I feel like option D makes sense since conducting tests during maintenance windows minimizes disruption, but I can't recall if that's explicitly recommended.
AH
Ahmad
1 year ago
I remember something about focusing on specific attack vectors, but I'm not sure if that means we should only use one at a time like option B suggests.
AU
Augustine
1 year ago
I think the CIS Controls emphasize the importance of testing in a controlled environment, so maybe option C is the right choice?
ST
Stephane
1 year ago
Okay, I've got this. The qualitative approach is the clear choice - it has a more straightforward process and is supported by appropriate guidance. I'm confident in this answer.
ME
Merlyn
1 year ago
Okay, I think I've got a strategy for this. Enabling parallel jobs could help, but I also wonder if there are ways to cache the packages or optimize the installation process. I'll need to research that further.