1. There are three methods of evaluating risks, State them and briefly describe each method giving pros and cons of each.
2. The Information systems security Assessment Framework is broken down into 'Phases'. State the title of these phases and describe what is required at each phase.
3. The Open Source Security Testing Methodology Manual (OSSTMM) is another Framework broken into 'phases ' or ' Modules' State and describe each section of this frame work.
4. Arguably the most important step in any penetration test, information gathering is broken down into TWO methods. State and describe the two methods of information gathering used today.