Easy2 marksStructured
Cyber securityGeneralcyber securitypenetration testingethical hacking

AQA GCSE · Question 16.1 · Cyber security

Explain what penetration testing is.

How to approach this question

1. Start by defining the core activity: what is being done? (Simulating an attack on a system). 2. State the purpose: why is this done? (To find security vulnerabilities or weaknesses). 3. Explain the ultimate goal: what is the outcome? (To fix the vulnerabilities before a real attacker finds them). 4. Mention who does it: ethical hackers.

Full Answer

Penetration testing, often called "pen testing" or "ethical hacking," is a proactive cybersecurity practice. It involves authorized professionals simulating a cyberattack on a computer system, network, or web application. The primary goal is to identify and exploit security vulnerabilities in the same way a malicious attacker would. By discovering these weaknesses in a controlled manner, an organization can then fix (or "patch") them before they can be exploited by real attackers.

Common mistakes

✗ Confusing it with other security measures like firewalls or anti-virus software. ✗ Vague answers like "it tests the system" or "it makes it secure". ✗ Describing it as a real, malicious attack rather than a simulated, authorized one.

Practice the full AQA GCSE Computer Science Paper 2

46 questions · hints · full answers · grading

More questions from this exam