Certified Information Systems Security Professional CISSP · Free Practice Question Easy

Question 111

Which of these hackers would you hire to do penetration testing?
  • A Grey hat hacker
  • B None of these
  • C Black hat hacker
  • D White hat hacker
Reveal correct answer

Correct answer: D

Explanation

The correct answer: White hat hackers, also known as ethical hackers, are computer security experts who specialize in testing and enhancing the security of an organization's information systems. They are typically employed by organizations to conduct penetration tests and vulnerability assessments on their networks and applications. This is in contrast to black hat hackers, who use their skills for malicious purposes, and grey hat hackers, who fall somewhere in between. White hat hackers follow ethical guidelines, have permission to conduct the testing, and report the vulnerabilities they find to the organization. The incorrect answers: Grey hat hackers operate in a moral grey area. They may hack without explicit permission but typically do so with good intentions, such as exposing vulnerabilities so they can be patched. However, due to their lack of official authorization, their actions can be considered illegal or unethical, and hiring them for penetration testing could pose a risk to the organization. Black hat hackers are individuals who use their skills maliciously to exploit vulnerabilities in a system for personal or financial gain, or sometimes just to cause harm. They do not have permission to access the systems they target, and their actions are illegal. Hiring a black hat hacker would pose significant legal and ethical issues. None of these is incorrect because all of the options above are types of hackers. A white hat hacker is the only option that would be suitable for conducting penetration testing.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need