CompTIA Exam PT0-002 Topic 4 Question 74 Discussion

Actual exam question for CompTIA's PT0-002 exam

Question #: 74
Topic #: 4

As part of an active reconnaissance, a penetration tester intercepts and analyzes network traffic, including API requests and responses. Which of the following can be gained by capturing and examining the API traffic?

AAssessing the performance of the network's API communication

BIdentifying the token/authentication detail

CEnumerating all users of the application

DExtracting confidential user data from the intercepted API responses

Show Suggested Answer

Suggested Answer: B

Scoping defines the penetration test's boundaries and objectives, ensuring alignment with the client's needs and expectations. This is a key step in pre-engagement activities, as outlined in the CompTIA Pentest+ objectives.

by Rainer at Dec 03, 2024, 12:09 PM

Limited Time Offer

25%

Off

Get Premium PT0-002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shanda

3 months ago

Ha! Enumerating all users? Might as well just knock on the front door and ask for the user list. C) is not the way to go here.

upvoted 0 times

Laticia

1 months ago

D) Extracting confidential user data from the intercepted API responses

upvoted 0 times

...

Chau

2 months ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Chandra

2 months ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Reena

3 months ago

D) Extracting confidential user data? No way! That's a big no-no. The penetration tester is testing the system, not trying to steal user data.

upvoted 0 times

Candida

1 months ago

C) Enumerating all users of the application

upvoted 0 times

...

Royal

2 months ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Rolande

2 months ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Carri

3 months ago

I agree with Venita. Identifying the authentication details is crucial for understanding the security posture of the application.

upvoted 0 times

Delsie

2 months ago

D) Extracting confidential user data from the intercepted API responses

upvoted 0 times

...

Bea

2 months ago

B) Identifying the token/authentication detail

upvoted 0 times

...

Lorrine

2 months ago

A) Assessing the performance of the network's API communication

upvoted 0 times

...

Venita

3 months ago

B) Identifying the token/authentication detail is definitely the correct answer. Capturing API traffic is a great way to analyze the authentication mechanisms in use.

upvoted 0 times