Penetration Testing and Vulnerability Analysis (CY-702 (A)) - Important Questions

What is a vulnerability scanner / vulnerability scanning, its tools and techniques, and how it helps organizations assess their security posture?

Explain why reconnaissance / information gathering and footprinting is the first and crucial phase of ethical hacking / penetration testing, including its process and techniques.

Explain the legal and ethical considerations associated with penetration testing and their impact on organizational decision-making.

What are the common stages of a penetration testing methodology?

Define penetration testing and explain its various types with suitable examples.

Explain penetration testing and differentiate between internal and external penetration testing.

Differentiate between black-box, white-box and grey-box penetration testing.

Compare network penetration testing vs application penetration testing, including use cases and specific considerations.

Explain the purpose of DNS reconnaissance for gathering information about an organization's external presence before penetration testing.

What are some common tools used for privilege escalation? Explain in detail.

Explain how web applications are tested for security vulnerabilities and discuss common web application vulnerabilities.

Describe SQL injection and Cross-Site Scripting (XSS) attacks and how these vulnerabilities can be mitigated.

Define confidentiality, integrity and availability in the context of web security.

Explain what business logic testing is, why it is important, and give examples.

Why is it important for penetration testers to have a thorough understanding of the target system's architecture before attempting exploitation?

Explain why employing HTTP Strict Transport Security (HSTS) is crucial to enhance web application security.

Explain the primary risk associated with SQL injection vulnerabilities in web applications.

Explain common social engineering techniques used in cyber-attacks.

Discuss the importance of wireless network security and explain Wi-Fi vulnerabilities and attacks.

How can an attacker perform reconnaissance on a physical facility to identify vulnerabilities?

What are the different Wi-Fi security protocols explain in detail.

Explain the main types of Wi-Fi vulnerabilities in detail.

Explain the importance of packet sniffing in wireless penetration testing.

Explain how employee training programs contribute to the mitigation of social engineering risks.

Calculate the number of possible keys for AES-256 encryption.

What is Cryptography? Explain the role of encryption and decryption in secure communication.

Describe different cryptographic algorithms and their applications.

How does symmetric encryption differ from asymmetric encryption?

Explain the process for tracking and resolving issues identified during testing.

Perform RSA encryption and decryption for given primes $p$, $q$, public exponent $e$, and message $M$.

Demonstrate how the RSA algorithm can be applied to achieve secure communication.

List the key elements that should be included in a documentation report for a cryptography audit.

Explain the importance of stakeholder engagement in the successful implementation of cryptographic measures.

Define red teaming and compare it with penetration testing.

Types of common CTF challenges in detail

Discuss the primary objectives of the penetration test in a specific case?

How Capture the Flag competitions simulate real-world cybersecurity scenarios

Compute the total number of possible password combinations for an 8-character alphanumeric password (including uppercase, lowercase and digits).