Penetration Testing Quiz
Offensive security techniques — reconnaissance, exploitation, and the methodology behind authorized pentesting.
This category currently has 81 questions in the SERVBG quiz bank. Below are a few sample questions — the full interactive quiz shuffles through the whole set with instant scoring.
Sample questions
What is the primary purpose of a penetration test?
- Stealing data from a competitor
- Replacing antivirus software
- Building production firewalls
- Automatically patching all vulnerabilities
- Authorized assessment to identify and validate security weaknesses
What does a "scope" document define in a pentest engagement?
- A list of customer complaints
- The marketing budget for the test
- The personal contact list of the tester
- Authorized targets, methods, timing, and rules of engagement
- The auditor's vacation schedule
Which tool is most commonly used as an intercepting web proxy for testing web applications?
- Wireshark
- Snort
- OSSEC
- Nessus
- Burp Suite
What is the role of nmap in a pentest?
- Generating SSL certificates
- Hosting reverse shells
- Network discovery and port/service scanning
- Patching kernels
- Compiling exploit payloads
What does a SYN scan in nmap (-sS) do?
- Floods the target with UDP packets
- Performs a full TCP connect on every port
- Performs a DNS zone transfer
- Encrypts traffic between scanner and target
- Sends SYN packets and infers port state without completing the TCP handshake
Related categories
Python (Coding)
Python syntax, standard-library usage, and the language idioms that come up in day-to-day scripting and application work.
JavaScript (Coding)
Core JavaScript language behavior, async patterns, and the quirks that trip up both beginners and experienced developers.
Linux
Linux command-line usage, file permissions, process management, and the everyday admin tasks every sysadmin and developer needs.
Security
General information security concepts — threats, defenses, and the fundamentals every IT professional should know.
Hardware
Computer hardware components, how they interact, and the troubleshooting knowledge behind keeping systems running.