Pen testing is generally performed in the following cases, except:

Question

BlackTom AI · Accepted Answer

Penetration testing is performed whenever changes could alter the attack surface, introduce new vulnerabilities, or require verification of security controls—so routine triggers include technical, policy, and infrastructure changes, not simply a personnel change at the executive level.

1) Relevant knowledge points and concepts
- Purpose of pen testing: to identify exploitable vulnerabilities in systems, networks, and applications and to validate security controls.
- Typical triggers: hardware/software updates, infrastructure changes (new networks, cloud migrations), policy changes that alter security requirements, post-incident validation, regulatory/compliance needs, and major deployments.
- Executive changes are organizational/leadership events and do not inherently change technical configurations or system vulnerabilities.

2) Step-by-step reasoning
- Examine each option for whether it materially affects technical security posture.
  a) The CEO has changed — evaluate: a personnel change does not directly modify systems, configurations, or policies; it’s administrative.
  b) Hardware or software updated/reinstalled — evaluate: updates can change configurations, introduce new software, or remove security controls; regressions and new vulnerabilities are possible.
  c) Organisation’s policy has changed — evaluate: new policies can require different access controls, encryption, or compliance levels; validation required.
  d) Changes in organisation’s infrastructure — evaluate: adding/removing networks, servers, cloud services or topology changes directly change the attack surface.

3) Intermediate steps / checks
- For (b), confirm that software updates often require regression testing and security retesting.
- For (c), map policy changes to technical controls that must be verified.
- For (d), enumerate changed assets and evaluate exposure.

4) Why the correct answer is correct
- "The CEO has changed" does not in itself alter system configurations or introduce technical vulnerabilities, so it is generally not a reason by itself to perform a penetration test. Pen testing is focused on technical and control changes, which the other options represent.

5) Why other options are incorrect
- Hardware/software updates can introduce vulnerabilities — pen testing is recommended.
- Policy changes can mandate new controls or reveal gaps — pen testing validates compliance.
- Infrastructure changes change the attack surface — pen testing must reassess exposures.

6) Conclusion
Therefore the exception is "The CEO has changed," which matches the provided correct answer.

Pen testing is generally performed in the following cases, except:单项选择题

类似问题

Which of the following best describes "ethical hacking"?

Which security testing technique involves simulating an attack on a system to evaluate its resistance to malicious activities?

Which of the following statements about penetration testing are correct? Select all that apply.

Question 25

You've been hired to perform an ethical hack of a company's network. After initial reconnaissance, you've identified an outdated server running several critical applications. What should your NEXT step be in this ethical hacking engagement?

You decide to hack your friends eCommerce website because he owes you $50. You scan the IP address of his web server with a port scanner and receive a response from a HTTP server running on port 80. The next step you would most likely take would be to _________.

According to the penetration testing process documentation, what is the PRIMARY distinction between how vulnerability assessments and penetration tests are conducted?

You decide to hack your friends eCommerce website because he owes you $50. You scan the IP address of his web server with a port scanner and receive a response from a HTTP server running on port 80. The next step you would most likely take would be to _________.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单