Penetration Testing and Vulnerability Analysis (CY-702 (A)) - Important Questions

Define penetration testing and explain its various types with suitable examples.

Differentiate between black-box, white-box and grey-box penetration testing.

Explain why reconnaissance, information gathering and footprinting is the first and crucial phase of ethical hacking and penetration testing, including its process and techniques.

What is vulnerability scanning, its tools and techniques, and how does it help organizations assess their security posture?

Explain the legal and ethical considerations associated with penetration testing and their impact on organizational decision-making.

Explain how web applications are tested for security vulnerabilities and discuss common web application vulnerabilities.

Describe SQL injection and Cross-Site Scripting (XSS) attacks and how these vulnerabilities can be mitigated.

What are some common tools used for privilege escalation? Explain in detail.

Discuss the importance of wireless network security and explain Wi-Fi vulnerabilities and attacks.

What are the different Wi-Fi security protocols? Explain in detail.

Explain common social engineering techniques used in cyber-attacks.

What is cryptography? Explain the role of encryption and decryption in secure communication.

Describe different cryptographic algorithms and their applications.

Perform RSA encryption and decryption for p=5, q=11, public exponent e=3 and message M=6. Show key generation, encryption and decryption steps.

Define red teaming and compare it with penetration testing.

Explain the types of common CTF challenges in detail.