medium
Single Answer
0Jack’s organization has engaged penetration testers for their annual penetration test. As part of the contract, the testers are provided with a list of target systems, operating systems, and software that they will be testing. What type of penetration test is Jack’s organization conducting?
Answer Options
A
A partially known environment test
B
An unknown environment test
C
A known environment test
D
A third- party test
Correct Answer: A
Explanation
Partially known environment tests provide some, but not all information about the environment for testers. In this case, knowledge of the systems, IPs, and services is an example of partial knowledge. Known environment tests provide full information to testers, allowing them to use information about the environment without having to discover it. Unknown environment tests simulate what an attacker would encounter and do not provide information; instead, the testers have to discover it themselves. Third-party tests are conducted by external groups or individuals and may be known, unknown, or partial knowledge tests.