What does a penetration tester do?
- A.Manages compliance documentation
- B.Tests the performance speed of applications
- C.Simulates real-world attacks to identify security vulnerabilities in systems and networks
- D.Tests the physical durability of network equipment, and penetration testers work without written authorisation from the client
Why C is correct
A penetration tester (also called an ethical hacker or pen tester) is authorized to simulate cyberattacks against an organization's systems, networks, and applications. The goal is to identify exploitable vulnerabilities before malicious attackers do. Pen testers document their findings and provide remediation recommendations.
Know someone studying for Security Fundamentals? Send them this one.