TRIVIA – Penetration Testing

Oct 27, 2025

Sonja Soderlund is an Oregon-based B2B freelance writer. Whether writing about mainframe computers, educational technology, or sustainable retail, she strives to bring clarity to complex issues. Connect with her or LinkedIn.

Mainframes have long been known for their unmatched reliability and security—but even the most trusted systems can hide surprises beneath the surface. As technology evolves, so do the tactics of those trying to exploit it. Penetration testing (pen testing), or “ethical hacking,” has become an essential way to uncover weaknesses that traditional audits might miss.

Planet Mainframe recently published an article by Mark Wilson (Technical Director at Vertali and Chief Editor and Producer of Cheryl Watson’s Tuning Letter) on the subject, in which he states that “the goal [of pen testing] “is not disruption but discovery: to identify cracks in a system before someone else does.”

Think you know your stuff when it comes to pen testing? Take our quiz to test your knowledge of vulnerabilities, testing techniques, and defense strategies that keep the world’s most critical systems safe.

Editor’s note from Penney Berryman — A Gold Star goes out to those who called out the error in the previous round of Trivia!

1. What is the main objective of a pen test?

 
 
 
 

2. Which two main stages typically make up a pen test on the mainframe?

 
 
 
 

3. During the footprinting stage, which type of data might a tester review to gather system information?

 
 
 
 

4. Name one tool commonly used for data gathering during mainframe footprinting.

 
 
 
 

5. In the exploitation phase, testers often begin with what type of account?

 
 
 
 

6. Which of the following weaknesses might pen testers exploit on a mainframe?

 
 
 
 

7. Why do mainframe security weaknesses often persist for years?

 
 
 
 

8. RACF, ACF2, and TSS are examples of what type of mainframe component?

 
 
 
 

9. Why is pen testing on the mainframe considered critical for risk management?

 
 
 
 

10. Which of the following is not usually listed as one of the benefits of pen testing?

 
 
 
 

1 Comment

  1. BILL C

    I disagree with 7. Limited and/or incorrect admin access is a prime reason for persistence of mainframe security weakness. There are limited numbers of QUALIFIED admins in the mainframe space.

    Reply

Submit a Comment

Your email address will not be published. Required fields are marked *

Sign up to receive the latest mainframe information

This field is for validation purposes and should be left unchanged.

Read More

What 2025 Taught Us About Mainframes: A Trivia Quiz

What 2025 Taught Us About Mainframes: A Trivia Quiz

As the year closes, and the year-end reflections roll in, we’re taking a closer look at key findings from the latest BMC, Kyndryl, and Planet Mainframe Arcati surveys. The results point to a platform that is evolving in response to cost pressures, skills gaps,...

Mainframe Miscellaneous Trivia!

Mainframe Miscellaneous Trivia!

As the year draws to a close (whether your days are growing shorter and darker or longer and brighter), December tends to invite a little reflection. Over the past year, Planet Mainframe Trivia has dished out a veritable smorgasbord of topics, from the early days of...

More Mainframe Lingo Trivia

More Mainframe Lingo Trivia

Mainframe environments come with their own vocabulary, much of it precise, legacy-rich, and completely opaque to anyone who hasn’t spent time in the ecosystem. And there really is no end to the alphabet soup. Even seasoned professionals pick up new terms over the...

❓ History of Artificial Intelligence Trivia

❓ History of Artificial Intelligence Trivia

November at Planet Mainframe is all about AI, and you don’t need us to tell you that artificial intelligence has now been integrated into many of our daily routines. But long before AI became a household term, IBM was shaping the foundations of this increasingly...