Certified Information Security Manager CISM · Free Practice Question Easy
Question 79
What is the purpose of a penetration test?
- A A) To identify and exploit vulnerabilities in a system
- B B) To patch vulnerabilities in a system
- C C) To prevent all attacks on a system
- D D) To assess the effectiveness of security controls
Reveal correct answer
Correct answer: D
Explanation
Explanation (Correct): The purpose of a penetration test is to simulate real-world attacks in order to assess the effectiveness of security controls and identify vulnerabilities that could be exploited by attackers. Explanation (Incorrect Options): A) To identify and exploit vulnerabilities in a system: Penetration tests aim to identify vulnerabilities, but their purpose is not to exploit them. B) To patch vulnerabilities in a system: Patching vulnerabilities is a separate activity that occurs after vulnerabilities are identified. C) To prevent all attacks on a system: While preventing attacks is a goal of security, it is not achievable through a penetration test alone.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
