CompTIA Exam PT0-002 Topic 4 Question 74 Discussion

Actual exam question for CompTIA's PT0-002 exam

Question #: 74
Topic #: 4

As part of an active reconnaissance, a penetration tester intercepts and analyzes network traffic, including API requests and responses. Which of the following can be gained by capturing and examining the API traffic?

AAssessing the performance of the network's API communication

BIdentifying the token/authentication detail

CEnumerating all users of the application

DExtracting confidential user data from the intercepted API responses

Show Suggested Answer

Suggested Answer: B

Scoping defines the penetration test's boundaries and objectives, ensuring alignment with the client's needs and expectations. This is a key step in pre-engagement activities, as outlined in the CompTIA Pentest+ objectives.

by Rainer at Dec 03, 2024, 12:09 PM

Limited Time Offer

25%

Off

Get Premium PT0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shanda

1 months ago

Ha! Enumerating all users? Might as well just knock on the front door and ask for the user list. C) is not the way to go here.

upvoted 0 times

Laticia

5 days ago

D) Extracting confidential user data from the intercepted API responses

upvoted 0 times

...

Chau

17 days ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Chandra

24 days ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Reena

1 months ago

D) Extracting confidential user data? No way! That's a big no-no. The penetration tester is testing the system, not trying to steal user data.

upvoted 0 times

Candida

2 days ago

C) Enumerating all users of the application

upvoted 0 times

...

Royal

16 days ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Rolande

29 days ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Carri

2 months ago

I agree with Venita. Identifying the authentication details is crucial for understanding the security posture of the application.

upvoted 0 times

Delsie

10 days ago

D) Extracting confidential user data from the intercepted API responses

upvoted 0 times

...

Bea

18 days ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Lorrine

29 days ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Venita

2 months ago

B) Identifying the token/authentication detail is definitely the correct answer. Capturing API traffic is a great way to analyze the authentication mechanisms in use.

upvoted 0 times