Flashcards
Security+ Penetration Testing Steps and Life Cycle
Flashcards do conjunto (10)
- 1Pen Test Step 1Verify a threat exists
done through research, social engineering, scanning, vuln assess tools, or OSINT - 2Pen Test Step 2Bypass security controls
test all weaknesses previously discovered - 3Pen Test Step 3Actively testing security controls
check for config vulnerabilities such as weak passwords - 4Pen Test Step 4Exploit vulnerabilities
prove the vuln exists and the risk is high - 5Pen Test Life Cycle #1Persistence
the ability to reconnect to a compromised system at will - 6Pen Test Life Cycle #2Privilege Escalation
horizontal or vertical - 7Pen Test Life Cycle #3Lateral Movement
gaining control over endpoints and devices not initially exploited - 8Pen Test Life Cycle #4Pivoting
gaining access to another device using remote access or tunneling protocols - 9Pen Test Life Cycle #5Actions on Objectives
the pen tester is showing that it's possible to exfiltrate data, deface a website, or more - 10Pen Test Life Cycle #6Cleanup
remove any backdoors, tools, software, files, etc that was used for the pen test
Informações
- Descrição
- CompTIA Information Technology (Security+ ) FlashCards sobre Security+ Penetration Testing Steps and Life Cycle, criado por Lyndsay Badding em 26-04-2023.
- Criado por
- Lyndsay Badding
- Visualizações
- 18
- Tags
- Avaliação