Which term describes tests that attempt to identify ways to exploit vulnerabilities, including external and internal testing?

Which term describes tests that attempt to identify ways to exploit vulnerabilities, including external and internal testing?

• A. Policy
• B. Penetration Test
• C. POP3
• D. PIN

Answer: (B)

Testing to identify exploitable weaknesses by attempting controlled attacks, both from outside the network and from within, is describing penetration testing. This approach uses authorized simulations of real-world attacks to uncover vulnerabilities that attackers could exploit, so defenses can be strengthened and incident response can be validated. External testing simulates threats coming from the Internet toward the organization’s perimeter, while internal testing looks at what a compromised internal actor could do. The other options don’t fit because policy is about rules, POP3 is an email retrieval protocol, and a PIN is an authentication code; none describe the activity of probing systems for exploitable vulnerabilities.

Testing to identify exploitable weaknesses by attempting controlled attacks, both from outside the network and from within, is describing penetration testing. This approach uses authorized simulations of real-world attacks to uncover vulnerabilities that attackers could exploit, so defenses can be strengthened and incident response can be validated. External testing simulates threats coming from the Internet toward the organization’s perimeter, while internal testing looks at what a compromised internal actor could do. The other options don’t fit because policy is about rules, POP3 is an email retrieval protocol, and a PIN is an authentication code; none describe the activity of probing systems for exploitable vulnerabilities.