Pentest Remediation Validation Quiz

1. What is the primary purpose of re-scanning systems after remediation?

To confirm vulnerabilities no longer appear in scan results and no new ones were introduced

To generate a report for compliance auditors

To compare scan speeds before and after patching

To verify the scanner software is functioning correctly

2. Which approach best validates that DNS security measures (e.g., DNSSEC, DNS filtering) have been properly implemented?

Testing DNS queries with security tools and verifying expected filtering or validation results

Reviewing DNS server configuration files

Checking if DNS records were updated

Confirming DNS provider sent a confirmation email

3. After remediating cross-site scripting (XSS) vulnerabilities, which validation method is most reliable?

Attempting injection of XSS payloads and confirming they are properly sanitized or escaped

Reviewing code commit messages

Checking if a security library was installed

Verifying the application version changed

4. A pentest identifies that services are running with unnecessary privileges. How should you validate the remediation?

Verifying via process monitoring that services now run with minimal required permissions

Checking service startup scripts in a text editor

Confirming services were restarted

Reviewing service documentation

5. When validating that logging and monitoring controls have been properly implemented post-remediation, what should be checked?

Verifying logs are being generated, centralized, and monitored for security events

Confirming that log files exist on disk

Checking if logging software licenses are current

Reviewing log retention policy dates

6. A pentest reveals unencrypted database backups. Which validation confirms the remediation?

Verifying new backups are encrypted by checking file headers or attempting decryption without the key

Checking that backup schedules were updated

Reviewing backup storage location

Confirming backup software was upgraded

7. After remediating a missing security header vulnerability (e.g., X-Frame-Options), how do you validate the fix?

Inspecting HTTP response headers with tools like curl or browser developer tools

Checking if the web server was restarted

Reading security header best practice guides

Confirming the fix was deployed to production

8. Which validation approach is most effective for confirming that default credentials have been changed on network devices?

Attempting login with known default credentials and verifying failure

Checking device serial numbers

Reviewing device purchase documentation

Verifying that devices are connected to the network

9. A pentest identifies overly permissive file share permissions. How should remediation be validated?

Attempting to access restricted files with low-privilege accounts and confirming access denial

Reviewing permission documentation

Checking that permissions were changed on a certain date

Verifying that backup copies exist

10. When validating multi-factor authentication (MFA) implementation post-remediation, which test is most conclusive?

Attempting login with only a password and confirming MFA prompt appears

Reviewing MFA documentation

Checking if MFA tokens were ordered

Confirming IT staff received MFA training

11. After a pentest identifies SQL injection vulnerabilities, which validation method most effectively confirms the remediation?

Re-running the same attack payloads against patched application endpoints

Reviewing code comments documenting the patch

Checking that the patch was deployed to staging only

Verifying vendor release notes mention the CVE

12. After remediating an insecure API endpoint, how should you validate the fix without causing service disruption?

Using a staging/test environment to replay pentest attack scenarios

Asking developers if the code was reviewed

Checking API documentation for security mentions

Verifying the API version number changed

13. A pentest reveals that sensitive data is being transmitted over unencrypted channels. Which validation confirms the fix?

Capturing traffic with packet analyzer and verifying encryption (TLS/SSL handshake observed)

Reading the network architecture diagram

Confirming that encryption software was purchased

Checking vendor documentation for encryption features

14. When validating remediation of weak password policies, what is the most direct verification method?

Testing password creation with invalid patterns (e.g., short, no special characters) and confirming rejection

Reviewing the password policy document

Checking if a CISO approved the policy change

Verifying that password reset emails are being sent

15. Post-remediation validation for privilege escalation vulnerabilities should include which action?

Attempting to escalate privileges with known techniques and verifying failure

Confirming the vulnerability was listed in the pentest report

Checking that users received security awareness training

Verifying the vendor released a patch notification

16. A pentest finds excessive ICMP traffic reaching internal servers. How should you validate that ICMP filtering remediation is effective?

Send ping requests from external networks and confirm no responses

Review the firewall rule names

Check if ICMP is mentioned in security policies

Verify that ping utilities are uninstalled

17. After patching a critical OS vulnerability, which validation step confirms the patch is actually installed and active?

Running version checks and comparing against the patch release notes

Rebooting the system and checking logs

Verifying the patch download was successful

Confirming the patch vendor released an update

18. A pentest report identifies weak SSL/TLS cipher suites on a web server. What is the best approach to validate the fix?

Use nmap with SSL scripts or testssl.sh to verify only strong ciphers remain enabled

Ask the vendor if they support modern TLS versions

Review the certificate expiration date

Check if HTTPS traffic is being logged

19. Which tool is most appropriate for validating that firewall rule changes have been correctly applied post-remediation?

Packet sniffing and connection attempts to verify blocked/allowed ports

Reviewing firewall configuration files in a text editor

Checking the firewall vendor's support portal

Running a vulnerability scan on the firewall device itself

Infrastructure Expert Validating Remediation After a Pentest Quiz