Drag or tap steps into the slots.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
mediumDrag & Drop
CS0-003 Practice Question: Arrange the steps for a typical penetration…
Arrange the steps for a typical penetration testing engagement in the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Reconnaissance, then Scanning, then Exploitation, then Post-exploitation, then Reporting
Penetration testing follows a structured methodology: recon, scanning, exploitation, post-exploitation, and reporting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Reconnaissance, then Scanning, then Exploitation, then Post-exploitation, then Reporting
Why this is correct
This is the correct order as per standard penetration testing methodology. Reconnaissance gathers initial information, scanning identifies open ports and services, exploitation uses vulnerabilities to gain access, post-exploitation expands control and collects data, and reporting documents findings.
- ✗
Scanning, then Reconnaissance, then Exploitation, then Post-exploitation, then Reporting
Why it's wrong here
This sequence incorrectly places active scanning before passive and active reconnaissance. Initiating port scans or vulnerability assessments without first mapping the target's external footprint, domain structure, and OSINT profile leads to inefficient resource utilization, high noise levels that trigger IDS/IPS alerts, and missed target vectors.
- ✗
Reconnaissance, then Scanning, then Post-exploitation, then Exploitation, then Reporting
Why it's wrong here
This order is logically flawed because it attempts to execute post-exploitation activities before establishing an initial foothold. Post-exploitation tasks, such as privilege escalation, lateral movement, and credential harvesting, inherently require active, authenticated, or shell-level access that can only be achieved through successful exploitation of a vulnerability.
- ✗
Exploitation, then Scanning, then Reconnaissance, then Post-exploitation, then Reporting
Why it's wrong here
This progression is unrealistic because it attempts exploitation as the initial step without any prior intelligence gathering. Without reconnaissance to map the attack surface and scanning to identify specific open ports, running services, and unpatched vulnerabilities, an attacker or penetration tester has no target vectors or payloads to execute, rendering exploitation blind and ineffective.
Go deeper
Related to this question
Learn chapter
Penetration Testing vs Vulnerability Assessment
Key term
Post-exploitation
Post-exploitation is the phase of a penetration test that begins after an attacker has gained initial access to a system, focusing on maintaining access, escalating privileges, moving laterally, and achieving the test's objectives.
Key term
Penetration testing
Penetration testing is a simulated cyberattack on a computer system, network, or application to find security weaknesses before real attackers can exploit them.
About these practice questions
Courseiva writes every CS0-004 question from scratch — 701 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.