Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

CompTIA Exam PT0-002 Topic 4 Question 74 Discussion

Actual exam question for CompTIA's PT0-002 exam

Question #: 74
Topic #: 4

[All PT0-002 Questions]

As part of an active reconnaissance, a penetration tester intercepts and analyzes network traffic, including API requests and responses. Which of the following can be gained by capturing and examining the API traffic?

AAssessing the performance of the network's API communication

BIdentifying the token/authentication detail

CEnumerating all users of the application

DExtracting confidential user data from the intercepted API responses

Show Suggested Answer

Suggested Answer: B

Scoping defines the penetration test's boundaries and objectives, ensuring alignment with the client's needs and expectations. This is a key step in pre-engagement activities, as outlined in the CompTIA Pentest+ objectives.

by Rainer at Dec 03, 2024, 12:09 PM

Limited Time Offer

25%

Off

Get Premium PT0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carri

6 days ago

I agree with Venita. Identifying the authentication details is crucial for understanding the security posture of the application.

upvoted 0 times

...

Venita

9 days ago

B) Identifying the token/authentication detail is definitely the correct answer. Capturing API traffic is a great way to analyze the authentication mechanisms in use.

upvoted 0 times

...

Shawnee

12 days ago

I believe assessing the performance of the network's API communication can also be gained by capturing and examining the API traffic.

upvoted 0 times

...

Ronny

14 days ago

Yes, I agree. It can also help in extracting confidential user data from the intercepted API responses.

upvoted 0 times

...

Charlene

17 days ago

I think capturing API traffic can help in identifying the token/authentication detail.

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77