Exercise Solution: Understanding Testing Methods and Tools

These are the required scans that should be matched up based on each scenario:

1. Scenario one: Application scan.

Application scans should be used to test new tools and applications being developed. You can also use them to check for security issues after a major code update or for ongoing maintenance.

2. Scenario two: Penetration test.

During penetration testing you’re trying to see if you can essentially break security like a malicious hacker would. When you make major changes to network configurations such as firewalls and routing changes…mistakes can happen that allow intruders in. Here you should recommend conducting a penetration test to discover those issue before the bad guys do.

3. Scenario three: Vulnerability scan.

New vulnerabilities surface nonstop and it’s important to scan for those continuously. But you may also need to scan for them at specific points in time when you receive intel or tips from trusted sources about new vulnerabilities.