Which term denotes a controlled security assessment that attempts to exploit vulnerabilities?

Which term denotes a controlled security assessment that attempts to exploit vulnerabilities?

• A. Penetration Testing
• B. Patch
• C. Phishing
• D. Patent

Answer: (A)

The idea being tested is a controlled security assessment where testers try to exploit weaknesses to see if an attacker could actually break in. This is penetration testing. It’s performed with explicit permission and a defined scope, using real-world attack techniques to determine if vulnerabilities can be exploited, what access could be gained, and how far an intruder could move inside the network. The goal is to validate risk and demonstrate how effective current defenses are, not just to identify issues on paper. To contrast, a patch is a fix applied to software to resolve a vulnerability, but it isn’t about actively testing defenses. Phishing is a social-engineering attack used to trick people into revealing credentials or sensitive information. A patent is a legal protection for inventions, not a security assessment.

The idea being tested is a controlled security assessment where testers try to exploit weaknesses to see if an attacker could actually break in. This is penetration testing. It’s performed with explicit permission and a defined scope, using real-world attack techniques to determine if vulnerabilities can be exploited, what access could be gained, and how far an intruder could move inside the network. The goal is to validate risk and demonstrate how effective current defenses are, not just to identify issues on paper.

To contrast, a patch is a fix applied to software to resolve a vulnerability, but it isn’t about actively testing defenses. Phishing is a social-engineering attack used to trick people into revealing credentials or sensitive information. A patent is a legal protection for inventions, not a security assessment.