thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Penetration Testing

An authorized, simulated attack on systems to find and safely exploit vulnerabilities before real attackers do.

Definition

Penetration testing goes beyond identifying vulnerabilities by actively exploiting them to demonstrate real-world impact, within a scope and rules agreed in writing. A typical test moves through planning, reconnaissance, scanning, exploitation, post-exploitation and reporting. Results are delivered as prioritized findings with remediation guidance.

Example

An external pen test against a company's internet-facing web servers that chains a SQL injection to obtain database credentials.

Exam tip

Exams contrast pen testing (exploits to prove impact) with vulnerability assessment (identifies and rates but does not exploit); written authorization is always required first.

Related terms