Penetration test
- Term
- Penetration test
- Exam
- CISA & CISM
- Definition
An authorized simulated attack that attempts to exploit weaknesses to show real impact.
- Explained
A penetration test is an authorized simulated attack that tries to exploit weaknesses to show real impact. It needs written authorization, agreed scope and rules of engagement, and findings must be tracked to closure and retested.
- In practice
Testers exploit a weak password to reach the customer database, proving real impact.
- Often confused with
- Vulnerability assessment
- Exam angle
Requires written authorization and rules of engagement.
- Related