1. What are the three main types of report presented to clients penetration testing?
2. In the executive report, what does the risk matrix quantify?
3. What is the purpose of a vulnerability map?
4. What is the purpose of an exploits map?
5. What should the testing methodology contain?
6. How can client-side or social engineering attacks be reduced?