Question $$

$25$

An $$organization$\text{'}$s $$security $$team $$has $$hired $$a $$penetration $$tester $$to $$assess $$the $$vulnerabilities $$in

its $$digital $$infrastructure$.$The $$penetration $$tester $$has $$a $$clear $$set $$of $$guidelines $$and $$is $$about $$to

start $$the $$test$.$When $$engaging $$in $$vulnerability $$management $$within $$an $$organization$,$which

activities $$will $$the $$penetration $$tester $$MOST $$likely $$undertake $$to $$ensure $$a $$comprehensive

assessment? $$

$($

Select $$the $$two $$best $$options$.$

$)$

Installing $$new $$software $$without $$prior $$permission

Running $$exploitation $$tools $$against $$known $$vulnerabilities

Assessing $$the $$environment $$for $$potential $$weak $$points

Deleting $$data $$found $$in $$critical $$servers