CompTIA PenTest+ (PT0-003) — Question 181

A penetration tester has just started a new engagement. The tester is using a framework that breaks the life cycle into 14 components. Which of the following frameworks is the tester using?

Answer options

• A. OWASP MASVS
• B. OSSTMM
• C. MITRE ATT&CK
• D. CREST

Correct answer: B

Explanation

The correct answer is OSSTMM, which is known for its comprehensive methodology that includes 14 components in its life cycle. The other frameworks listed, such as OWASP MASVS, MITRE ATT&CK, and CREST, do not specifically break the life cycle into 14 components, making them incorrect choices.