Chapter 5 – Monitoring, Scanning, and Penetration Testing

1. The white box tester can access the source code.
2. It would prevent you from monitoring or auditing an individual.
3. The gray box pen tester would be given at least one piece of information; normally, they get limited data.
4. Rules of engagement must be established.
5. He would have regular meetings with the client, who would tell him if he has been discovered.
6. The scope determines whether the pen test is black, gray, or white.
7. The pen tester would give the internal IT team their IP address so that they can establish whether or not it is the pen tester or an attacker.
8. The credentialed vulnerability scan has more permissions than a non-credentialed one and has the ability to audit, scan documents, check account information, check certificates, and provide more accurate information
9. The cleanup phase is where the systems are returned back to the original state.
10. Open-source intelligence...