Penetration Testing (AQA GCSE Computer Science): Flashcards
📚Flashcards
Practise the cards
13 cards from this deck
ShowHide
Practise the cards
13 cards from this deck
What is penetration testing?
What is penetration testing?
Testing systems to find security weaknesses before attackers do
Who conducts penetration testing?
Who conducts penetration testing?
Ethical hackers and security professionals
Key difference: pen testing vs real attacks
Key difference: pen testing vs real attacks
Authorized, controlled, by security professionals for improvement
Main goal of penetration testing
Main goal of penetration testing
Discover vulnerabilities before real attackers exploit them
Pen testing: checking user awareness
Pen testing: checking user awareness
Testing if employees fall for social engineering tricks
Pen testing: evaluating security policies
Pen testing: evaluating security policies
Shows effectiveness of security measures in practice
Pen testing: incident response
Pen testing: incident response
Checks how well organisation responds to security incidents
Proactive security approach
Proactive security approach
Finding and fixing problems before they can be exploited
White-box testing simulates
White-box testing simulates
Insider threats (e.g., malicious employee with access)
White-box testing features
White-box testing features
Has system knowledge, login credentials given, faster
Black-box testing simulates
Black-box testing simulates
External attacks from outsiders with no prior knowledge
Black-box testing features
Black-box testing features
No knowledge, uses brute force, time-consuming, may miss areas
White-box vs black-box: main difference
White-box vs black-box: main difference
White-box has insider knowledge; black-box has none