I85PREP
⌘ K
OK POST study materials
OK POST study resources

OK POST practice questions

One question at a time. Build your OK POST understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Exam Overview and Structure

The OK POST exam is organized into how many separate knowledge domains?

  1. Four
  2. Six Correct answer.
  3. Seven
  4. Five

Explanation

The OK POST exam blueprint divides its content into six distinct knowledge domains. Each domain carries its own weighting, and together they account for the full scored portion of the test. Candidates should map their study plan against all six domains rather than focusing on a single area.

Question 2Exam Overview and Structure

Which statement best describes how the OK POST exam is delivered to candidates?

  1. As a practical field exercise scored by a supervisor
  2. As a computer-based test taken at an approved testing center Correct answer.
  3. As an oral interview conducted by a panel of officers
  4. As a take-home packet returned within thirty days

Explanation

The OK POST exam is administered as a computer-based test at an approved testing location. Candidates receive their results after the testing session rather than through an evaluator's field observation. This format supports standardized scoring across all testers.

Question 3Exam Overview and Structure

The OK POST exam blueprint is primarily intended to ensure which of the following?

  1. That test content matches the knowledge required for the job Correct answer.
  2. That agencies can customize questions for their own jurisdiction
  3. That candidates are ranked against one another numerically
  4. That every candidate receives identical test questions

Explanation

A test blueprint documents the knowledge, skills, and abilities the job requires and links each question to that content. It is a validity tool, not a ranking or customization mechanism. This is why the exam structure is published as part of the candidate information.

Question 4Exam Overview and Structure

Which of these is a knowledge domain explicitly listed in the OK POST exam structure?

  1. Criminal Investigation Correct answer.
  2. Firearms Maintenance and Repair
  3. Traffic Collision Reconstruction
  4. Public Budget Administration

Explanation

Criminal investigation is one of the six knowledge domains named in the OK POST exam structure. The other listed options describe specialized or administrative functions that fall outside the defined domain list. Candidates should be able to recite the six domain names from memory.

Question 5Exam Overview and Structure

Within the OK POST exam structure, which domain area covers report writing and documentation standards?

  1. Patrol Procedures
  2. Legal Studies
  3. Criminal Investigation
  4. Communications and Report Writing Correct answer.

Explanation

Report writing and documentation are grouped in the communications and report writing domain. That domain addresses written and verbal reporting expectations rather than patrol tactics or legal rules. Candidates should associate documentation standards with this specific domain.

Question 6Exam Overview and Structure

What is the primary source document candidates should consult for the official OK POST exam content outline?

  1. The agency's internal standard operating procedures manual
  2. The municipal personnel department's hiring announcement
  3. A commercially published test preparation book
  4. The state POST commission's published exam information materials Correct answer.

Explanation

The authoritative content outline is published by the state POST commission as part of its exam information materials. Agency manuals and commercial prep books may be useful but are not the official source. Candidates should always verify the current outline directly with the commission.

Question 7Exam Overview and Structure

A candidate wants to know how many scored questions appear on the OK POST exam. Where should that figure be confirmed?

  1. In the candidate's conditional offer letter
  2. In a study group's shared notes
  3. In the current official exam information published by the POST commission Correct answer.
  4. In the training academy's lesson plan

Explanation

Question counts, timing, and scoring rules are set by the POST commission and published in its official exam information. Academy lesson plans and offer letters do not define the exam's structure. Only the commission's current materials should be treated as authoritative.

Question 8Exam Overview and Structure

In the OK POST exam structure, the legal studies domain is best described as covering which content?

  1. Departmental payroll and personnel rules
  2. Evidence room inventory procedures
  3. Vehicle pursuit driving techniques
  4. Criminal law, procedure, and constitutional protections Correct answer.

Explanation

The legal studies domain addresses criminal law, criminal procedure, and the constitutional protections that govern police action. It is distinct from administrative and tactical domains. Candidates should expect questions tying statutes and case law to officer conduct.

Question 9Exam Overview and Structure

Which domain of the OK POST exam most directly addresses de-escalation and use-of-force decision making?

  1. Criminal Investigation
  2. Communications and Report Writing
  3. Legal Studies
  4. Patrol Procedures Correct answer.

Explanation

Use-of-force and de-escalation decision making are tested within the patrol procedures domain, which covers field response and officer safety. Legal studies supplies the governing standards, but the operational decision making sits in patrol procedures. Candidates should connect tactical judgment questions to that domain.

Question 10Exam Overview and Structure

Which of the following best explains why the OK POST exam includes a domain on communications and report writing?

  1. Because written reports replace the need for courtroom testimony
  2. Because report forms vary by agency and must be memorized
  3. Because officers must document observations accurately for court and agency records Correct answer.
  4. Because typing speed is a scored component of the exam

Explanation

Accurate documentation supports prosecution, agency records, and later testimony, which is why it is a tested competency. Reports supplement rather than replace testimony, and forms are not standardized for memorization. Typing speed is not a scored exam component.

Question 11Exam Overview and Structure

The OK POST exam structure separates patrol procedures from criminal investigation primarily because the two domains differ in what way?

  1. One concerns field response and the other concerns case development Correct answer.
  2. One applies only to supervisors and the other only to recruits
  3. One is tested orally and the other in writing
  4. One is scored and the other is unscored

Explanation

Patrol procedures focus on field response, officer safety, and routine operations, while criminal investigation focuses on case development and evidence. Both are scored domains on the same written exam. The distinction is subject matter, not rank or delivery method.

Question 12Exam Overview and Structure

A candidate reviewing the OK POST exam structure notices that domain weightings differ. What does a higher weighting most likely indicate?

  1. That domain has more scored questions relative to other domains Correct answer.
  2. That domain is tested only on a retake examination
  3. That domain is optional for candidates to study
  4. That domain is scored with partial credit

Explanation

Domain weightings reflect the proportion of scored questions allocated to each content area. A higher weighting means more questions, so it warrants proportionally more study time. Weightings do not make a domain optional or change the scoring method.

Question 13Exam Overview and Structure

Which statement about the OK POST exam's scored domains is accurate?

  1. Candidates may choose which domains to attempt
  2. Domain scores are reported to the candidate's agency only
  3. All six domains contribute to the candidate's score Correct answer.
  4. Only the legal studies domain is scored

Explanation

All six knowledge domains are represented in the scored portion of the exam. Candidates do not select which domains to attempt, and results reporting follows the commission's published policy. The exam is a single standardized instrument, not a menu of optional sections.

Question 14Exam Overview and Structure

What is the most accurate description of the relationship between the OK POST exam and academy training?

  1. The exam assesses job-related knowledge that academy training helps develop Correct answer.
  2. The exam certifies completion of academy coursework
  3. The exam is administered before any academy instruction begins
  4. The exam score replaces the academy's final examination

Explanation

The OK POST exam measures job-related knowledge, and academy instruction is one way candidates build that knowledge. The exam is not a certificate of academy completion, nor does it replace academy assessments. Passing it is a separate requirement in the certification process.

Question 15Exam Overview and Structure

A candidate asks whether the OK POST exam includes a physical agility component. Which answer is correct?

  1. No, physical agility is assessed separately from the written exam Correct answer.
  2. Yes, agility is scored within patrol procedures
  3. Yes, but only for candidates over age thirty
  4. No, physical fitness is not required for Oklahoma officers

Explanation

Physical agility testing is handled separately from the written OK POST exam, which measures job-related knowledge. Fitness requirements still apply to officers, but they are not part of this written instrument. Candidates should check with their hiring agency for the physical testing schedule.

Question 16Exam Overview and Structure

Which of these best describes the type of questions used on the OK POST exam?

  1. Group problem-solving exercises
  2. Multiple-choice items tied to job-related content areas Correct answer.
  3. Essay prompts scored by a review panel
  4. Fill-in-the-blank items requiring statute citations

Explanation

The OK POST exam uses multiple-choice items mapped to the six job-related content domains. This format allows broad content sampling and objective scoring. Essays, citation recall, and group exercises are not part of the exam structure.

Question 17Exam Overview and Structure

A candidate scores below passing on the OK POST exam. What does the exam structure typically allow?

  1. Retesting according to the commission's published retake policy Correct answer.
  2. Automatic certification after an appeal letter
  3. Immediate promotion to a probationary position
  4. Waiver of the exam for candidates with prior experience

Explanation

Retake rules are set by the commission and published in its exam information, so candidates should consult that policy after an unsuccessful attempt. An appeal letter does not automatically confer certification, and prior experience does not waive the exam. Passing the exam is a separate requirement from hiring decisions.

Question 18Exam Overview and Structure

Which domain of the OK POST exam would most likely contain a question about lawful search and seizure?

  1. Patrol Procedures
  2. Legal Studies Correct answer.
  3. Criminal Investigation
  4. Communications and Report Writing

Explanation

Search and seizure rules derive from constitutional and statutory law, placing them in the legal studies domain. Patrol procedures may involve searches operationally, but the governing legal standards are tested under legal studies. Candidates should map legal-rule questions to that domain.

Question 19Exam Overview and Structure

The OK POST exam structure is reviewed and updated periodically. What does this mean for a candidate using older study materials?

  1. Older materials are always equally valid
  2. Domain names never change between revisions
  3. The current official outline should be checked for changes Correct answer.
  4. Only materials printed after the candidate's hire date apply

Explanation

Because the blueprint is revised over time, candidates should confirm the current outline rather than relying on older materials. Domain names, weightings, and content emphasis can change between revisions. Checking the official source prevents wasted study effort.

Question 20Exam Overview and Structure

Which pairing of OK POST domain and content is correct?

  1. Patrol Procedures - routine patrol and officer safety Correct answer.
  2. Legal Studies - vehicle maintenance schedules
  3. Communications and Report Writing - interview transcription standards
  4. Criminal Investigation - traffic control devices

Explanation

Routine patrol operations and officer safety are core patrol procedures content. Traffic control devices belong with traffic or patrol topics, interview documentation with communications, and vehicle maintenance is administrative. Matching content to the correct domain is a common exam-structure skill.

Question 21Exam Overview and Structure

What is the primary reason the OK POST exam structure is published for candidates in advance?

  1. To let agencies select a subset of domains for their recruits
  2. To reveal the exact wording of scored items
  3. To allow candidates to prepare in the areas the job requires Correct answer.
  4. To permit candidates to challenge individual questions before testing

Explanation

Publishing the structure supports fair preparation by telling candidates which job-related areas are tested. It does not expose actual item wording or allow pre-testing challenges. Agencies do not select a custom subset of domains for the statewide exam.

Question 22Exam Overview and Structure

A candidate has limited study time and wants to allocate it efficiently based on the exam structure. Which approach is most consistent with the blueprint?

  1. Divide time equally regardless of weighting
  2. Study only the domain with the most interesting content
  3. Spend time in proportion to each domain's weighting Correct answer.
  4. Focus exclusively on the final domain listed

Explanation

Because domain weightings reflect the share of scored questions, time is best allocated in proportion to those weightings. Equal division ignores the blueprint's emphasis, and personal interest or list position has no bearing on scoring. This is a practical application of the exam structure.

Question 23Exam Overview and Structure

Which statement correctly distinguishes the OK POST exam from agency-specific hiring processes?

  1. The exam replaces the agency background investigation
  2. The exam is written and scored by each individual agency
  3. The exam sets statewide job-related knowledge standards, while hiring decisions rest with agencies Correct answer.
  4. The exam guarantees a job offer upon a passing score

Explanation

The POST exam establishes statewide knowledge standards, but hiring, background checks, and selection remain agency functions. A passing score does not guarantee employment, and the exam does not replace other selection steps. Understanding this boundary clarifies the exam's role in the process.

Question 24Exam Overview and Structure

In the OK POST exam structure, which domain would most likely include a question on responding to a domestic disturbance call?

  1. Legal Studies
  2. Patrol Procedures Correct answer.
  3. Criminal Investigation
  4. Communications and Report Writing

Explanation

Responding to calls for service, including domestic disturbances, is core patrol procedures content covering field response and scene safety. Legal studies supplies governing rules and investigation covers follow-up case work. The initial response itself is a patrol function.

Question 25Exam Overview and Structure

Which of the following best describes how the six OK POST domains relate to one another within the exam?

  1. They are ordered by increasing difficulty across the exam
  2. They are combined into a single unlabeled section
  3. They are independent sections scored separately for certification
  4. They overlap in practice but are tested as distinct content areas Correct answer.

Explanation

The domains overlap in real police work, yet the exam tests them as distinct content areas so results can be mapped to the blueprint. They are not separately certified sections, nor are they ordered by difficulty. Recognizing the overlap helps candidates apply knowledge across questions.

Question 26Exam Overview and Structure

A candidate is planning study time for the OK POST exam and wants to know which domain carries the greatest number of scored items. What does the published exam structure provide for this purpose?

  1. A domain-by-domain breakdown showing the relative emphasis each content area receives Correct answer.
  2. A ranking of domains by average candidate score from prior administrations
  3. A list of the exact questions that will appear on the candidate's form
  4. A guarantee that every domain contains an identical number of items

Explanation

The published structure distributes scored items across domains so candidates can see which content areas carry more weight and plan study time accordingly. It describes emphasis by domain rather than disclosing specific items, and the domains are not weighted equally.

Question 27Exam Overview and Structure

Which OK POST domain is the most appropriate place for an item asking a candidate to identify the elements of a report narrative that make it usable by a prosecutor?

  1. Criminal investigation
  2. Patrol procedures
  3. Communications and report writing Correct answer.
  4. Legal studies

Explanation

Report writing content belongs to the communications and report writing domain, which addresses documenting incidents clearly and completely. The other domains touch on reports only incidentally rather than as their core subject.

Question 28Exam Overview and Structure

A candidate notices that the OK POST exam structure lists domains such as patrol procedures and criminal investigation as separate areas. What is the most reasonable inference for study purposes?

  1. Separate domains mean the knowledge never overlaps in actual police work
  2. Each domain is tested as a distinct body of knowledge, though real incidents draw on several at once Correct answer.
  3. Domains listed separately are optional and may be skipped
  4. Only one domain is scored on any given exam administration

Explanation

Domains are separated so each body of knowledge can be tested and weighted, even though real incidents require officers to combine knowledge from several areas. Separation is an assessment convenience, not a claim that the work is compartmentalized.

Question 29Exam Overview and Structure

What does the OK POST exam structure most directly tell a candidate about the relationship between the written exam and the training academy curriculum?

  1. The exam covers only material never taught in an academy setting
  2. The exam domains align with the knowledge areas taught in basic academy instruction Correct answer.
  3. The exam replaces academy coursework for candidates who score highly
  4. The exam is unrelated to academy content and tests general aptitude

Explanation

The exam structure is built around the knowledge areas that basic academy training develops, so the domains correspond to what recruits learn. It supplements rather than substitutes for academy instruction.

Question 30Exam Overview and Structure

An item asks a candidate to decide when an officer may lawfully enter a residence without consent during an emergency. Which OK POST domain does this item most appropriately belong to?

  1. Patrol procedures
  2. Legal studies Correct answer.
  3. Criminal investigation
  4. Communications and report writing

Explanation

Questions about the lawfulness of entry, consent, and emergency exceptions test legal rules and their application, which is the legal studies domain. Patrol and investigation domains may reference such facts, but the governing rule is legal content.

Question 31Exam Overview and Structure

A candidate is deciding how much time to spend on each OK POST domain. Which approach best reflects how the exam structure should guide that decision?

  1. Spend equal time on every domain regardless of its weighting
  2. Divide time equally between the first and last domains listed
  3. Study only the domain with the most dramatic-sounding content
  4. Allocate time roughly in proportion to each domain's share of scored items Correct answer.

Explanation

Because domains carry different shares of scored items, proportional study time reflects the likelihood that content will be tested. Equal time ignores the weighting information the structure provides.

Question 32Exam Overview and Structure

A candidate wants to confirm whether the OK POST exam contains a scored component beyond the written knowledge test. What is the soundest way to resolve that question?

  1. Check the official OK POST materials describing exam components and scoring Correct answer.
  2. Ask another candidate who took a different version of the exam
  3. Assume that any component not mentioned in a study guide does not exist
  4. Infer the answer from the number of domains listed in the outline

Explanation

Only the official OK POST materials authoritatively describe which components exist and how each is scored. Secondary sources, anecdotes, and inference from the domain count cannot settle the question.

Question 33Exam Overview and Structure

An exam item presents a scenario in which an officer must calm a volatile encounter before deciding whether force is justified. Which pairing of OK POST domains does this item most directly draw on?

  1. Criminal investigation together with report writing only
  2. Legal studies together with vehicle operations
  3. De-escalation and use-of-force decision making together with communications Correct answer.
  4. Patrol procedures together with records management

Explanation

Calming a volatile encounter is de-escalation and communication, and the force decision that follows sits in the use-of-force domain. The two areas are tested together because the decision depends on how the encounter was managed.

Question 34Exam Overview and Structure

A candidate reasons that because the OK POST exam structure lists a legal studies domain, patrol items cannot require legal knowledge. How should that reasoning be evaluated?

  1. It is correct, because legal content appears only in legal studies items
  2. It is correct, because each domain is tested in isolation from the others
  3. It is flawed, because patrol scenarios routinely require applying legal rules to operational decisions Correct answer.
  4. It is flawed only if the candidate has already passed the legal studies portion

Explanation

Domains are separated for weighting and organization, but operational scenarios commonly require applying legal rules, so patrol items can depend on legal knowledge. Treating domains as sealed off from one another misreads the structure.

Question 35Exam Overview and Structure

A candidate finds two study outlines that describe the OK POST domain structure differently. What is the most defensible way to decide which to follow?

  1. Average the two outlines and study the overlap only
  2. Use the older outline because it has been in circulation longer
  3. Use the version issued through official OK POST channels and check its date Correct answer.
  4. Use whichever outline is shorter and easier to memorize

Explanation

The authoritative structure is the one published through official OK POST channels, and its date shows whether it reflects the current version. Length, age, or averaging do not establish authority.

Question 36Exam Overview and Structure

Which statement best captures how the OK POST domains function as a set rather than as independent subjects?

  1. They rotate so that only one domain applies to any given incident
  2. They are ranked by importance, and lower-ranked domains are unscored
  3. They are independent subjects that never intersect in actual police work
  4. They describe facets of a single job, so an incident may require knowledge from several domains at once Correct answer.

Explanation

The domains are facets of one job, and realistic incidents require an officer to combine knowledge across them. The structure separates them for testing and weighting, not because the work separates them.

Question 37Exam Overview and Structure

A candidate is preparing for an OK POST item on interviewing a witness and later documenting the statement. Which domain pairing does this item most plausibly test?

  1. Criminal investigation together with communications and report writing Correct answer.
  2. Vehicle operations together with patrol procedures
  3. Legal studies together with records management
  4. De-escalation together with use-of-force decision making

Explanation

Witness interviewing is investigation content, and documenting the statement is report writing, so the item spans those two domains. The other pairings address unrelated operational or legal topics.

Question 38Exam Overview and Structure

A candidate argues that because the OK POST exam structure is published in advance, the exam must test only predictable, rote facts. Which assessment of that argument is most accurate?

  1. Publishing the structure reveals content areas and emphasis, not the specific items or their reasoning demands Correct answer.
  2. The argument is sound, because weighting information removes all scenario questions
  3. The argument is sound, because a published outline means every item is memorization
  4. The argument fails only because the outline is published after the exam

Explanation

A published structure tells candidates which content areas are tested and how heavily, but it does not disclose the items themselves, which can require applying knowledge to scenarios. Knowing the map is not the same as knowing the questions.

Question 39Exam Overview and Structure

A candidate has strong knowledge of patrol tactics but weak knowledge of legal studies and report writing. Using the exam structure, what is the most strategic adjustment?

  1. Abandon patrol study entirely because one strong domain is sufficient
  2. Direct added effort to the weaker domains while maintaining the stronger one, since all are scored Correct answer.
  3. Study only the weakest domain and ignore the rest
  4. Focus on whichever domain has the most interesting scenarios

Explanation

Every listed domain contributes scored items, so a weak area drags on the total regardless of strength elsewhere, while the strong area should be maintained rather than abandoned. Interest level is not a weighting signal.

Question 40Exam Overview and Structure

A candidate claims that the OK POST exam structure duplicates the agency hiring process, so preparing for the exam also prepares for a background investigation. How should this claim be evaluated?

  1. It conflates two different things: the exam structure covers job knowledge, while hiring processes cover suitability and background Correct answer.
  2. It is correct, because agencies use the exam as the sole hiring criterion
  3. It is correct only for candidates who have already been conditionally hired
  4. It is correct, because the exam structure includes background investigation content

Explanation

The exam structure organizes job-knowledge content, whereas agency hiring processes assess suitability, background, and related criteria. Preparing for one does not substitute for the other.

Question 41Core Concepts and Terminology

In penetration testing terminology, what does the term 'scope' most precisely refer to?

  1. The set of systems, networks, and applications the client has authorized the tester to assess Correct answer.
  2. The software tools the tester is contractually permitted to install
  3. The total number of hours budgeted for the testing team
  4. The list of vulnerabilities the tester expects to find during the engagement

Explanation

Scope defines the authorized boundary of testing: which in-scope assets may be touched and, by implication, which are out of scope. It is a legal and contractual boundary, not a prediction of findings, a time budget, or a tool allowlist.

Question 42Core Concepts and Terminology

A client asks for a test in which the tester is given no prior information about the target environment and must discover it as an outsider would. Which engagement type is this?

  1. White box testing
  2. Grey box testing
  3. Regression testing
  4. Black box testing Correct answer.

Explanation

Black box testing provides the tester with no internal knowledge of the target, simulating an external attacker who must perform reconnaissance and enumeration. White and grey box engagements supply varying degrees of internal information to the tester.

Question 43Core Concepts and Terminology

Which term describes a piece of software deliberately exposed on a network to attract and observe attacker activity?

  1. Proxy
  2. Honeypot Correct answer.
  3. Bastion host
  4. Jump box

Explanation

A honeypot is a decoy system designed to attract attackers so their techniques can be observed and studied while production systems remain protected. Bastion hosts, jump boxes, and proxies are legitimate access or traffic-routing components, not decoys.

Question 44Core Concepts and Terminology

What is the primary purpose of a vulnerability scan as distinct from a penetration test?

  1. To simulate a physical intrusion into a data center
  2. To train staff by sending them phishing emails
  3. To enumerate known weaknesses using automated signatures and report them for triage Correct answer.
  4. To demonstrate a full attack chain by exploiting flaws and pivoting through the network

Explanation

Vulnerability scanning is largely automated enumeration of known weaknesses, producing a list for prioritization and remediation. A penetration test goes further by attempting exploitation and chaining findings to demonstrate real impact.

Question 45Core Concepts and Terminology

In risk terminology, what does 'likelihood' represent when assessing a vulnerability?

  1. The severity score assigned by the vendor
  2. The probability that a threat will successfully exploit the weakness Correct answer.
  3. The monetary cost of remediating the weakness
  4. The number of hosts affected by the weakness

Explanation

Risk is commonly framed as the combination of likelihood and impact, where likelihood expresses the probability of a threat successfully exploiting a weakness. Remediation cost, vendor severity scores, and host counts are separate inputs that may inform prioritization but are not likelihood.

Question 46Core Concepts and Terminology

Which term refers to the process of identifying services and versions listening on discovered hosts during a penetration test?

  1. Remediation
  2. Escalation
  3. Enumeration Correct answer.
  4. Pivoting

Explanation

Enumeration is the systematic discovery of services, versions, users, shares, and other details on identified hosts. Escalation, pivoting, and remediation describe privilege gain, lateral movement, and fixing issues respectively.

Question 47Core Concepts and Terminology

What does the acronym CVE identify in security reporting?

  1. A certification for penetration testers
  2. A framework for scoring vulnerability severity
  3. A publicly catalogued identifier for a specific known vulnerability Correct answer.
  4. A protocol for encrypted remote administration

Explanation

CVE stands for Common Vulnerabilities and Exposures and provides a unique, shared identifier for a specific publicly disclosed vulnerability. It is not a certification, a scoring framework, or a network protocol.

Question 48Core Concepts and Terminology

A tester uses a compromised web server to reach an internal database server that was not directly accessible from the internet. Which technique is this?

  1. Cloning
  2. Pivoting Correct answer.
  3. Fuzzing
  4. Sniffing

Explanation

Pivoting uses a compromised host as a foothold to route traffic into network segments that the tester cannot reach directly. Fuzzing and sniffing are input-testing and traffic-capture techniques, and cloning is unrelated to routing through a host.

Question 49Core Concepts and Terminology

Which statement best distinguishes a 'threat' from a 'vulnerability'?

  1. A threat is a confirmed breach, while a vulnerability is a suspected breach
  2. A threat is a weakness in code, while a vulnerability is an attacker's motivation
  3. A threat is always internal, while a vulnerability is always external
  4. A threat is a potential actor or event that can cause harm, while a vulnerability is a weakness that the threat could exploit Correct answer.

Explanation

Threats are potential sources of harm such as attackers or natural events, whereas vulnerabilities are weaknesses in systems that a threat could exploit. Keeping the two separate matters because a weakness with no credible threat carries different risk than one actively targeted.

Question 50Core Concepts and Terminology

During an engagement, a tester discovers a critical flaw in a system that is explicitly outside the agreed scope. What is the most appropriate action?

  1. Ignore the finding entirely and omit it from the report
  2. Publish the finding immediately to warn other organizations
  3. Stop testing that system and report the observation to the client contact for guidance Correct answer.
  4. Continue exploiting the flaw to fully document its impact

Explanation

Out-of-scope systems must not be tested, so the tester stops interacting with the system and reports the observation through the agreed channel so the client can authorize further work. Continuing to exploit, publishing, or silently omitting the issue all conflict with professional and contractual obligations.