What is the term for a simulated attack to test the security system and detect vulnerabilities of a network or organization?

What is the term for a simulated attack to test the security system and detect vulnerabilities of a network or organization?

• A. Penetration Testing
• B. Phishing
• C. Physical Penetration
• D. Patch

Answer: (A)

Penetration testing is the practice of performing a controlled, authorized simulated attack against a network, system, or organization to identify and exploit security weaknesses. The aim is to reveal real-world vulnerabilities and verify that defenses, monitoring, and response processes work as intended, so fixes can be applied before an real attacker exploits them. This goes beyond simply listing flaws, because it involves attempting to exploit them in a safe, legal environment to measure impact and improve security. Phishing, by contrast, is a social engineering tactic targeting people, not a full system test. Physical penetration focuses on bypassing physical security controls, while a patch is about applying fixes to software, not about testing the security posture.

Penetration testing is the practice of performing a controlled, authorized simulated attack against a network, system, or organization to identify and exploit security weaknesses. The aim is to reveal real-world vulnerabilities and verify that defenses, monitoring, and response processes work as intended, so fixes can be applied before an real attacker exploits them. This goes beyond simply listing flaws, because it involves attempting to exploit them in a safe, legal environment to measure impact and improve security. Phishing, by contrast, is a social engineering tactic targeting people, not a full system test. Physical penetration focuses on bypassing physical security controls, while a patch is about applying fixes to software, not about testing the security posture.