What are the three phases involved in security testing?
A.
Reconnaissance,Conduct,Report
B.
Reconnaissance,Scanning,Conclusion
C.
Preparation,Conduct,Conclusion
D.
Preparation,Conduct,Billing
Explanation:
Preparation phase – A formal contract is executed containing non-disclosure of the client’s data
and legal protection for the tester. At a minimum,it also lists the IP addresses to be tested and time
to test.
Conduct phase – In this phase the penetration test is executed,with the tester looking for potential
vulnerabilities.
Conclusion phase – The results of the evaluation are communicated to the pre-defined
organizational contact,and corrective action is advised.
C