가이드 연계 퀴즈 · 하드 레벨

자동 침투 테스트 퀴즈의 AI

AI 침투 테스트 에이전트가 승인된 범위를 존중하면서 관찰된 시스템 상태를 계획하고 도구 출력 및 체인 결과를 해석하는 방법을 확인하세요.

관련 가이드 경로자동화된 침투 테스트의 AI
질문 1 의 8

Which phases does NIST’s technical guide include in a security testing and assessment process?

모든 질문 미리보기8 질문

퀴즈를 풀면 정답과 설명이 나타납니다.

  1. Which phases does NIST’s technical guide include in a security testing and assessment process?
    • Planning, discovery, attack, and reporting
    • Model pretraining, fine-tuning, deployment, and monitoring
    • Data labeling, medical diagnosis, treatment, and follow-up
    • Design, advertising, checkout, and customer support
  2. LLM 기반 침투 테스트 에이전트는 일반적으로 '플래너'를 어떤 용도로 사용합니까?
    • 직원 휴가 예약
    • 다음 공격 단계를 결정하기 위해 목표와 시스템 상태를 추론합니다.
    • 회사 로고 디자인
    • 마케팅 이메일 보내기
  3. What is a goal of NIST target-vulnerability validation techniques?
    • Guarantee that an attacker will exploit every vulnerability
    • Replace the need to define test scope
    • Corroborate that a suspected vulnerability exists in the target environment
    • Automatically assign legal liability for a weakness
  4. Which sequence matches three enterprise tactics in MITRE ATT&CK?
    • Classification, Regression, then Clustering
    • Planning, Discovery, then Reporting
    • Encryption, Compression, then Backup
    • Initial Access, Privilege Escalation, then Lateral Movement
  5. 침투 테스트에서 AI의 주요 위험은 무엇입니까?
    • 동일한 기술을 사용하면 악의적인 공격자에 대한 장벽을 낮출 수 있으며 에이전트는 의도하지 않은 중단을 일으킬 수 있습니다.
    • 컴퓨터가 더 빠르게 작동하게 해준다
    • 종이에만 작동합니다.
    • 비밀번호가 필요하지 않습니다.
  6. What did the cited LLM penetration-testing benchmark evaluate?
    • Whether autonomous testing eliminates the need for authorization
    • How language models and a PentestGPT system performed on benchmark penetration-testing tasks
    • Whether every vulnerability can be exploited from noisy tool output
    • Whether AI testing is more common than annual manual testing
  7. In the guide’s attack-graph description, what do the nodes and edges represent?
    • Nodes are users, and edges are their email messages
    • Nodes are model layers, and edges are attention heads
    • Nodes are system states, and edges are exploits that can move between states
    • Nodes are vulnerabilities, and edges are severity labels
  8. Why does an AI pen-testing agent need human authorization and a defined scope?
    • Authorization makes scan results automatically accurate
    • Scope is needed only to improve language-model fluency
    • A defined scope guarantees every vulnerability is exploitable
    • Its offensive actions can disrupt systems, and testing must stay within approved targets