Question

QUESTION 48

Which of the following statements comparing vulnerability assessments with penetration testing is TRUE (choose TWO)?

                        

Only a pentest requires a pre-agreed attack profile

                        

A vulnerability assessment provides a broader picture of an organization's security posture than a pentest

                        

A vulnerability assessment requires a test environment rather than the production network

                        

Only a pentest involves the use of software tools

                        

A penetration test requires more specialist knowledge

Answer 1

Answer)

The vulnerability would provide a better and broader picture to that of an organization's security posture instead of pentest where wherein it is only a pentest that is needed as the pre-agreed attack profile.

Also, note that the pentest would be done for pre-agreed limits for avoiding the cause present with that of the production network or that of the customer confidentiality as well as the assessment done to it which would have access to a broader range of threat as well as vulnerability instead of pentest.

This would need expert knowledge as well as software tools.