Kuiz berkaitan panduan · Keras Tahap

AI dalam Kuiz Ujian Penembusan Automatik

Semak cara ejen ujian pen AI merancang daripada keadaan sistem yang diperhatikan, mentafsir output alat dan penemuan rantai sambil menghormati skop yang dibenarkan.

Laluan panduan yang berkaitanAI Dalam Ujian Penembusan Automatik
soalan 1 daripada 8

Which phases does NIST’s technical guide include in a security testing and assessment process?

Pratonton setiap soalan8 soalan

Jawapan dan penjelasan muncul semasa anda mengambil kuiz.

  1. Which phases does NIST’s technical guide include in a security testing and assessment process?
    • Planning, discovery, attack, and reporting
    • Model pretraining, fine-tuning, deployment, and monitoring
    • Data labeling, medical diagnosis, treatment, and follow-up
    • Design, advertising, checkout, and customer support
  2. Untuk apa ejen ujian pen berasaskan LLM biasanya menggunakan 'perancang'?
    • Menjadualkan cuti pekerja
    • Menaakul matlamat dan keadaan sistem untuk memutuskan langkah serangan seterusnya
    • Mereka bentuk logo syarikat
    • Menghantar e-mel pemasaran
  3. What is a goal of NIST target-vulnerability validation techniques?
    • Guarantee that an attacker will exploit every vulnerability
    • Replace the need to define test scope
    • Corroborate that a suspected vulnerability exists in the target environment
    • Automatically assign legal liability for a weakness
  4. Which sequence matches three enterprise tactics in MITRE ATT&CK?
    • Classification, Regression, then Clustering
    • Planning, Discovery, then Reporting
    • Encryption, Compression, then Backup
    • Initial Access, Privilege Escalation, then Lateral Movement
  5. Apakah risiko utama AI dalam ujian penembusan?
    • Teknik yang sama boleh mengurangkan halangan untuk penyerang berniat jahat dan ejen boleh menyebabkan gangguan yang tidak diingini
    • Ia menjadikan komputer berjalan lebih pantas
    • Ia hanya berfungsi di atas kertas
    • Ia menghapuskan keperluan untuk kata laluan
  6. What did the cited LLM penetration-testing benchmark evaluate?
    • Whether autonomous testing eliminates the need for authorization
    • How language models and a PentestGPT system performed on benchmark penetration-testing tasks
    • Whether every vulnerability can be exploited from noisy tool output
    • Whether AI testing is more common than annual manual testing
  7. In the guide’s attack-graph description, what do the nodes and edges represent?
    • Nodes are users, and edges are their email messages
    • Nodes are model layers, and edges are attention heads
    • Nodes are system states, and edges are exploits that can move between states
    • Nodes are vulnerabilities, and edges are severity labels
  8. Why does an AI pen-testing agent need human authorization and a defined scope?
    • Authorization makes scan results automatically accurate
    • Scope is needed only to improve language-model fluency
    • A defined scope guarantees every vulnerability is exploitable
    • Its offensive actions can disrupt systems, and testing must stay within approved targets