Practice penetration testing methodology vocabulary: reconnaissance, scoping, PTES standard, rules of engagement, and post-exploitation phases.
0 / 13 completed
1 / 13
The '_____ phase' is the first stage of a penetration test, where the tester gathers information about the target.
Reconnaissance (recon) is the initial phase of a pentest where the tester collects publicly available information about the target (OSINT, DNS records, employee data) without active probing.
2 / 13
'The pentest scope is limited to the _____ environment.' Why is scope definition critical?
Limiting scope to the staging environment (or specific IP ranges) prevents accidental disruption of live systems and defines the legal boundary of authorized testing.
3 / 13
What does PTES stand for?
PTES (Penetration Testing Execution Standard) is a framework defining the standard methodology for professional penetration tests, covering pre-engagement through reporting.
4 / 13
'Rules of _____ define what testers are authorized to do during a pentest engagement.
Rules of Engagement (RoE) are the formal agreement defining authorized test activities, excluded systems, communication protocols, and emergency procedures for a pentest engagement.
5 / 13
The 'post-exploitation phase' occurs after a tester has:
Post-exploitation assesses what an attacker could do after compromising a system — lateral movement, data access, persistence mechanisms — to demonstrate the full business impact of a vulnerability.
6 / 13
You're reviewing the description for a Pull Request that includes a new script used to identify potential command injection vulnerabilities. The PR description states: 'This script uses regex to find instances of eval() calls in the codebase.' What is the *most* important follow-up question you should ask the author?
This assesses understanding of risk assessment and security considerations. While regex is a valid technique, it doesn't address the critical issue of potential denial-of-service (DoS) attacks that could result from an overly complex or inefficient script. Option A focuses on implementation details; option C addresses compatibility—a secondary concern; and option D falsely claims the description is sufficient.
7 / 13
During a standup meeting, Sarah says: 'I'm currently focusing on the 'reconnaissance' phase of our penetration test – I'm running nmap scans and gathering information about the target network.' Which of the following best describes what Sarah is *actually* doing?
This tests the practical application of a core phase. Reconnaissance isn't about finding *vulnerabilities*; it's about gathering *information* that will guide subsequent steps. A correct understanding here is vital for effective pentesting. Option A misrepresents the purpose; option C describes exploitation, and option D falsely claims accuracy.
8 / 13
After a successful exploit during a penetration test, the tester needs to demonstrate impact. What does the 'post-exploitation phase' primarily involve?
The post-exploitation phase isn't about fixing the vulnerability; it's about understanding *what happened* after exploitation. This includes verifying the exploit worked, assessing the extent of compromise (data stolen, systems affected), and documenting findings for remediation. Option A describes patching; option C is a separate task; and option D incorrectly links it to reconnaissance.
9 / 13
Mark is conducting a penetration test of a web application. During the 'information gathering' phase, he discovers that the application uses an outdated version of PHP with known vulnerabilities. Which of the following best describes his next step in this phase?
The 'information gathering' phase focuses on identifying vulnerabilities. Discovering an outdated version with known issues necessitates immediate action – documenting and prioritizing exploitation to demonstrate impact is the correct approach. Ignoring the vulnerability would be negligent; a full audit isn't immediately necessary.
10 / 13
During a penetration test of a cloud infrastructure, the team identifies several misconfigured security groups that expose sensitive data to the public internet. Which phase of the penetration testing methodology is primarily focused on this activity?
This scenario directly involves identifying flaws in configuration. 'Vulnerability analysis' is the correct answer because it aligns with the process of discovering weaknesses caused by misconfigurations. 'Information gathering' might be a preliminary step, but exploitation and reporting are not the primary focus here.
11 / 13
Liam is preparing a PR description for a script that identifies potential SQL injection vulnerabilities. The description should include:
A clear PR description for a SQL injection detection script should focus on its core function: identifying vulnerable input fields. Pattern matching is the most direct and accurate way to achieve this. The other options are either overly technical or misleading about the script's capabilities.
12 / 13
"The 'reconnaissance' phase of a penetration test involves gathering intelligence about the target system. Which tool is MOST commonly used for this initial stage?
'Nmap' is the standard and most widely used tool for initial reconnaissance because it quickly identifies live hosts on a network and collects basic information about their services. While other tools are valuable later in the process, Nmap is the primary choice for gathering this foundational intelligence.
13 / 13
During a standup meeting, David says: 'I'm currently engaged in the 'containment' phase of our penetration test – I've isolated the affected server to prevent further damage.' What does this statement primarily indicate?
The 'containment' phase focuses on limiting the impact of a successful exploit. Isolating the affected server is a standard practice to prevent further damage or escalation of the attack. Exploitation and documentation are part of later phases; remediation (fixing the vulnerability) isn't explicitly stated here.
What will I learn from the "Penetration Testing Methodology Vocabulary" exercise?
Practice penetration testing methodology vocabulary: reconnaissance, scoping, PTES standard, rules of engagement, and post-exploitation phases.
Is this exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is free to use with no account, sign-up, or paywall required.
How many questions are in this exercise?
This set contains 13 multiple-choice questions, each with a detailed explanation shown after you answer.
Do I need to create an account to track my progress?
No account is required. Your progress bar and score reset each time you reload the page, but you can retry the exercise as many times as you like.
Who is this Security Lab exercise for?
This exercise is built for IT professionals and non-native English speakers who need to read, write, and discuss security lab topics confidently at work.
What happens if I answer a question incorrectly?
You will see the correct answer highlighted along with a detailed explanation of why it is correct -- so every wrong answer becomes a learning moment, not just a lost point.
Can I retry this exercise?
Yes -- click "Try again" on the results screen at any time to reset your score and go through all the questions again.
How long does this exercise take to complete?
Most learners finish all 13 questions in under 10 minutes, since each question is answered by clicking a single option.
Where can I find more Security Lab exercises?
See the full Security Lab exercises hub for more vocabulary drills on this topic.
Is this exercise mobile-friendly?
Yes -- the exercise works on any device with a modern browser, including phones and tablets, with no app download required.