CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 8

Penetration Testing Techniques

This chapter covers the following official Security+ exam objective:

• ▶ 1.8 Explain the techniques used in penetration testing.

Essential Terms and Components

• ▶ white box

• ▶ black box

• ▶ gray box

• ▶ rules of engagement

• ▶ lateral movement

• ▶ privilege escalation

• ▶ persistence

• ▶ pivoting

• ▶ bug bounty program

• ▶ war flying

• ▶ war driving

• ▶ footprinting

• ▶ OSINT

• ▶ teaming (red, blue, white, purple)

Penetration testing differs from vulnerability scanning, which you just read about in Chapter 7, “Security Assessment Techniques.” Vulnerability scanning seeks to merely programmatically identify vulnerabilities. A penetration test takes testing further by trying to exploit the vulnerabilities to gain access. As ...