312-50v13 Practice Test

312-50v13 Practice Test practice questions, page 2 of 42, with answer review and explanations.

Question 6

Which of the following hacking frameworks describes adversary tactics, techniques, and procedures (TTPs) used in cyberattacks?

  1. NIST CSF 2.0
  2. ISSF
  3. MITRE ATT&CK
  4. ISO 28901

Question 7

You have been asked to perform a penetration test for a local company. You have had several meetings with the client and are now almost ready to begin the assessment. Which of the following is the document that would contain verbiage which describes what type of testing is allowed and when you will perform testing and limits your liabilities as a penetration tester?

  1. Project scope
  2. Nondisclosure agreement
  3. Service-level agreement
  4. Rules of engagement

Question 8

Which of the following addresses the secrecy and privacy of information?

  1. Availability
  2. Integrity
  3. Confidentiality
  4. Authentication

Question 9

After the completion of the pen test, you have provided the client with a list of controls to implement to reduce the identified risk. What term best describes the risk that remains after the controls have been implemented?

  1. Inherent risk
  2. Residual risk
  3. Gap analysis
  4. Total risk

Question 10

During a security review, you have discovered that there are no documented security policies for the area you are assessing. Which of the following would be the most appropriate course of action?

  1. Create policies while testing
  2. Stop the audit
  3. Identify and evaluate current practices
  4. Increase the level of testing