Question

You've been hired as part of a pen test team. During the in brief, you learn the client wants the pen test attack to simulate a normal user who finds ways to elevate privileges and create attacks. Which test type does the client want?

Answer 1

It sounds like the client wants a simulated attack that mimics a normal user finding ways to elevate privileges and create attacks. This type of pen test is commonly known as a "User-Based Penetration Test" or "User Simulation Test."