CV1-003

CV1-003 practice questions, page 5 of 5, with answer review and explanations.

Question 21

A company wants to check its infrastructure and application for security issues regularly. Which of the following should the company implement?

  1. Performance testing
  2. Penetration testing
  3. Vulnerability testing
  4. Regression testing

Question 22

A company that utilizes an IaaS service provider has contracted with a vendor to perform a penetration test on its environment. The vendor is able to exploit the virtualization layer and obtain access to other instances within the cloud provider's environment that do not belong to the company. Which of the following BEST describes this attack?

  1. VM escape
  2. Directory traversal
  3. Buffer overflow
  4. Heap spraying