ECSA v10: EC-Council Certified Security Analyst v10

Question

A security analyst at Techsoft Solutions is conducting penetration testing on the company’s critical IT assets. As part of this activity, he is simulating the methods and techniques of a real attacker because he has been given limited or no information about the company and its assets.

Identify the type of testing the security analyst is performing.

Explanation

Blind testing gives the penetration tester little to no prior information about the target, requiring the tester to discover information and operate similarly to a real external attacker. EC-Council describes blind testing as testing in which the tester has no information about the system under test.

Learn more

EC-Council: Network Penetration Testing

ECSA v10: EC-Council Certified Security Analyst v10

AstroTutor

Notes

Readiness

QuestionQ9

Community Discussion