If you were to hired to conduct a strict penetration test for a school how would
ID: 3731710 • Letter: I
Question
If you were to hired to conduct a strict penetration test for a school how would you answer these briefly? A. How will we determine what types of vulnerabilities exist in their network:s and systems? B. What type of vulnerability scans will we need to conduct? C. What specific security tools will we need and use in order to conduct each of these scans? (Nessus, etc.) D. Will we use automated or manual scanning tools? E. What is the general timeframe for vulnerability scanning? (one hour, six hours, one day, etc.)Explanation / Answer
A.) Answer-: By understanding common attacks , vulnerability scanning tools,assesing risk and to know everything unknown about the network we can determine types of vulnerabilities in network .
B.) Answer-: Port scan,Network vulnerability scan,web application security scan,database security scan ,ERP security scan are types of vulnerability scas need to be conducted.
C.)Answer-: Nessus,Metasploit,backtract series 5,OpenVAs we use to scan
D.Answer-: Manual scanning tools we will use.
E.Answer-:one day is the general timeframe for vulnerability scanning.