Câu 102: PT0-003: CompTIA PenTest+

A penetration tester wants to use multiple TTPs to assess the reactions (alerted, blocked, and others) by the client's current security tools. The threat-modeling team indicates the TTPs in the list might effect their internal systems and servers. Which of the following actions would the tester most likely take?

1. A. Use a BAS tool to test multiple TTPs based on the input from the threat-modeling team. — đáp án hiện tại
2. B. Perform an internal vulnerability assessment with credentials to review the internal attack surface.
3. C. Use a generic vulnerability scanner to test the TTPs and review the results with the threat-modeling team.
4. D. Perform a full internal penetration test to review all the possible exploits that could affect the systems.