Cece, a penetration tester, has been hired by a company to attempt to breach the company's systems and gain access to whatever she can, just as if she were a real threat actor. Which of the following might be one of the initial tests that she performs?
A) A non-credentialed vulnerability scan
B) An agent-based vulnerability scan
C) A credentialed vulnerability scan
D) A push-based vulnerability scan

Question

Quizplus · Accepted Answer

A non-credentialed vulnerability scan is often one of the initial tests performed by penetration testers to identify vulnerabilities without using any credentials, simulating an external attacker's perspective.

Cece, a Penetration Tester, Has Been Hired by a Company