SSCP: Systems Security Certified PractitionerDemo

Question

Which of these statements about ethical hacking is incorrect?

A An organization should use ethical hackers who do not sell auditing, hardware, software, firewall, hosting, and/or networking services.
B Testing should be done remotely to simulate external threats.
C Ethical hacking should not involve writing to or modifying the target systems negatively.
D Ethical hackers never use tools that have the potential of affecting servers or services.

Explanation

Ethical hacking can require authorized use of assessment tools that have the potential to affect servers or services. The risk is controlled through defined scope, safeguards, and coordination; it is not eliminated by a rule that such tools are never used.

SSCP: Systems Security Certified PractitionerDemo

AstroTutor

Notes

Readiness

QuestionQ513

Community Discussion