Which term describes a hacker engaged in authorized penetration testing or security consultancy?

Which term describes a hacker engaged in authorized penetration testing or security consultancy?

• A. Hacktivists
• B. Unskilled attacker
• C. Authorized
• D. Shadow IT

Answer: (C)

Authorization is the defining factor for someone performing penetration testing or security consulting. When a tester has explicit, documented permission from the system owner, their actions are sanctioned within a defined scope, making their hacking activities legitimate rather than illicit. This authorization distinguishes them as legitimate security professionals who aim to identify and fix vulnerabilities. Other terms describe different behaviors or motivations. Hacktivists pursue political or social goals and often operate without permission. An unskilled attacker lacks the necessary expertise to conduct professional testing. Shadow IT refers to systems or applications used without formal approval, not to authorized testing.

Authorization is the defining factor for someone performing penetration testing or security consulting. When a tester has explicit, documented permission from the system owner, their actions are sanctioned within a defined scope, making their hacking activities legitimate rather than illicit. This authorization distinguishes them as legitimate security professionals who aim to identify and fix vulnerabilities.

Other terms describe different behaviors or motivations. Hacktivists pursue political or social goals and often operate without permission. An unskilled attacker lacks the necessary expertise to conduct professional testing. Shadow IT refers to systems or applications used without formal approval, not to authorized testing.