What is a penetration test?

• A. An unauthorized attack on a computer system
• B. An authorized simulated attack on a computer system
• C. An analysis of network traffic
• D. A method for securing data at rest

Answer: (B)

A penetration test is an authorized simulated attack on a computer system performed to identify vulnerabilities and assess security measures. The primary goal is to mimic the strategies and techniques that hackers might use to exploit weaknesses in the system. By conducting a penetration test, organizations can gain insights into their security posture, allowing them to address vulnerabilities before they can be exploited by malicious actors.

This process typically involves testing web applications, networks, and even mobile applications to uncover security flaws. The findings from a penetration test can guide organizations in strengthening their defenses, implementing effective security policies, and ensuring compliance with relevant regulations.

In contrast, options suggesting unauthorized attacks or analyses of network traffic do not align with the formal and ethical nature of penetration testing, which is planned and executed with permission from the organization that owns the system. Similarly, methods for securing data at rest focus on data protection strategies rather than the proactive and tactical approach of penetration testing.