Reference no: EM133358384

1. Which of these is not a requirement for a typical penetration testing environment?

A. Closed network

B. Virtualized computing environment

C. Sign-in credentials for the systems to be tested?

D. Practice targets

2. Which type of hacker has consent to attempt to access the target?

A. Penetration tester

B. Hacktivist

C. Nonethical hacker

D. Insider threat

3. The ___ documentation would typically specify the testing timeline, location, preferred method of communication, and IP addresses or networks from which testing will originate

A. Non-disclosure

B. Rules of engagement

C. Audience analysis

D. Security control

4. ___ indicates that the organization is willing to accept the level of risk associated with a given activity or process.

A. Risk mitigation

B. Risk avoidance

C. Risk acceptance

D. Risk sharing

5. This regulation aims to secure the processing of credit card payments and other types of digital payments:

A. PCI DSS

B. HIPAA

C. FedRAMP

D. GDPR