CompTIA Exam PT0-002 Topic 1 Question 44 Discussion

Actual exam question for CompTIA's PT0-002 exam

Question #: 44
Topic #: 1

A penetration tester is conducting an assessment for an e-commerce company and successfully copies the user database to the local machine. After a closer review, the penetration tester identifies several high-profile celebrities who have active user accounts with the online service. Which of the following is the most appropriate next step?

AContact the high-profile celebrities.

BDelete the high-profile accounts.

CImmediately contact the client.

DRecord the findings in the penetration test report.

Show Suggested Answer

Suggested Answer: C

The most likely explanation for why a penetration tester cannot scan a server that was previously scanned successfully is that the IP address is on the blocklist. Blocklists are used to prevent malicious actors from scanning servers, and if the IP address of the server is on the blocklist, the scanning process will be blocked.

by Teddy at Aug 09, 2023, 03:59 PM

Limited Time Offer

25%

Off

Get Premium PT0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

16 days ago

Whoa, that's a lot of high-profile accounts! I'd be tempted to just delete them and call it a day, but that's probably not the best approach. Better to play by the rules and report it to the client. They can decide how to handle it.

upvoted 0 times

Osvaldo

19 hours ago

A) Contact the high-profile celebrities.

upvoted 0 times

...

Javier

19 days ago

Hmm, this is a tricky one. Contacting the celebrities directly could be seen as a violation of their privacy. Deleting the accounts may raise more issues than it solves. I think the most appropriate next step is to record the findings in the penetration test report and let the client handle it.

upvoted 0 times

...