MENU
An organization regularly conducts its own penetration tests. Which of the following scenarios MUST be covered for the test to be effective?
Suggested Answer: D
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
CO
Corrie
10 months ago
Not sure if all scenarios are equally important though.
NI
Nicolette
11 months ago
Compromised admin access is a must, no doubt!
EU
Eun
11 months ago
Surprised that accidental access isn't a bigger concern!
AF
Afton
11 months ago
I think internal attackers are more critical to test.
LO
Lou
11 months ago
Definitely need to cover third-party vendors!
CA
Carmen
12 months ago
I’m a bit confused about option D; while accidental access is a concern, I’m not sure if it’s as critical as the others for a penetration test.
PH
Phillip
12 months ago
I think we practiced a question similar to this, and I recall that third-party vendors can pose risks, so option A might also be important to include.
NY
Nydia
12 months ago
I'm not entirely sure, but I feel like option B, compromising system administrator access, could lead to significant damage, so it might be a must-have scenario.
JO
Johnetta
1 year ago
I remember we discussed the importance of covering internal threats, so I think option C about an internal attacker is crucial.
DE
Demetra
1 year ago
This is a good question that gets at the heart of effective penetration testing. I think the key is to make sure the test covers all the potential entry points, both external and internal. That way you can really stress-test the system's defenses.
IL
Ilona
1 year ago
Okay, for this type of question, I'd focus on identifying the scenarios that pose the greatest risk to the organization. A compromised admin or third-party vendor access seem like critical areas to test. I'll make sure I understand those attack vectors well.
CH
Cherelle
1 year ago
This seems like a straightforward question about the scope of a penetration test. I think the key is to consider all the potential attack vectors that could compromise the system, including insider threats like a compromised admin or third-party vendor access.
LI
Lino
1 year ago
Hmm, I'm a bit unsure about this one. I know penetration testing is important, but I'm not sure if all those scenarios are required to be covered. I'll need to think through the different types of threats more carefully.
YO
Yolando
1 year ago
This is a tricky one. I'll have to think carefully about the risk response strategies that apply to both positive and negative risks.
LA
Lashanda
1 year ago
From what I practiced, I feel like option A aligns best with standard policies, while the others don't really fit the definition of significant accounting policies as I learned them.
MA
Marci
1 year ago
Hmm, I'm not totally sure about this one. I'd have to think it through a bit more to decide between the social sharing rate and the click to open rate.
GL
Glory
1 year ago
I heard the test also includes a scenario where the CEO accidentally replies to a Nigerian prince email. That's a classic!
IS
Isabelle
1 year ago
A is a tricky one. Gotta make sure those third-party vendors aren't a weak link in the security chain.
RE
Reiko
1 year ago
A is definitely important, can't overlook those vendors.
BE
Benedict
1 year ago
B) System administrator access compromised
CO
Corinne
1 year ago
C) Internal attacker with access to the system
RE
Reita
1 year ago
A) Third-party vendor with access to the system
EZ
Ezekiel
1 year ago
D is a good one too. Accidental data access is a common issue that shouldn't be overlooked.
PE
Penney
1 year ago
D) Internal user accidentally accessing data
AL
Alecia
1 year ago
C) Internal attacker with access to the system
JI
Jin
1 year ago
A) Third-party vendor with access to the system
KE
Keshia
1 year ago
C seems like the most realistic scenario. An internal attacker with access could do a lot of damage if the systems aren't properly secured.
DA
Daniel
1 year ago
C) Internal attacker with access to the system
NA
Nadine
1 year ago
B) System administrator access compromised
SI
Silvana
1 year ago
A) Third-party vendor with access to the system
AL
Alonzo
1 year ago
I think the correct answer is B. System administrator access compromised. That's a critical access point that needs to be tested.
MA
Mariann
2 years ago
I believe scenario B should also be covered. If a system administrator's access is compromised, it could lead to a major security breach.
SH
Sheridan
2 years ago
I agree with Olga. Internal attackers are often overlooked but can cause significant damage.
OL
Olga
2 years ago
I think scenario C must be covered because internal attackers can pose a serious threat.