ISC Exam Questions

Which of the following would NOT be considered a penetration testing technique?

Which of the following would NOT be considered a penetration testing technique?

A.
Sniffing

B.
Scanning

C.
War dialing

D.
Data manipulation

Explanation:
The correct answer is Data manipulation. Data manipulation describes the corruption of data
integrity to perform fraud for personal gain or other reasons. External penetration testing should not
alter the data in any way. The other three are common penetration techniques.