Threat Informed Penetration Testing Questions

Plan and execute security testing that is informed by threat intelligence and realistic adversary behavior. Candidates should demonstrate how they identify relevant threat actors, translate intelligence into test cases and realistic attack scenarios, emulate adversary tactics techniques and procedures, and prioritize testing based on likely adversary goals and business impact. Include how to map scenarios to adversary frameworks such as the MITRE Adversarial Tactics, Techniques, and Common Knowledge framework, incorporate threat feeds and telemetry into test design, and validate detection and mitigation controls against prioritized adversary behaviors.