Home
CompTIA
CompTIA PenTest+ PT0-002
Study Mode

CompTIA PenTest+ PT0-002 Practice Question

During an active reconnaissance phase, a penetration tester is analyzing the URLs of a client's web application to determine entry points and possible vulnerabilities. Which of the following URL formats is MOST likely to be useful for identifying potential parameters for testing inputs or discovering hidden directories?

[email protected]?subject=Inquiry
ftp://ftp.example.com/resources
https://www.example.com/product.php?id=1234&category=tools
https://www.example.com/privacy

Next Question

Correct Incorrect Unanswered

Report Issue

Answer Description

The correct answer is 'https://www.example.com/product.php?id=1234&category=tools'. This URL contains parameters ('id' and 'category'), which can be tested for vulnerabilities such as SQL injection, XSS, and more. A penetration tester could manipulate these parameters to see how the application responds, thereby potentially discovering security flaws.

The incorrect answers listed don't provide the same level of actionable information. The URL containing the 'mailto' protocol is typically used for email and does not usually have parameters that could be tested for web application vulnerabilities. The URL with 'https://www.example.com/privacy' is likely a static page and while it could contain potential endpoints for further investigation, it does not explicitly showcase parameters like the correct answer. Lastly, the URL 'ftp://ftp.example.com/resources' uses the FTP protocol, which is less likely to be the focus of this type of testing in comparison to HTTP(S), which directly interacts with web applications.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.

What are URL parameters and how are they used in security testing?

Open an interactive chat with Bash

What is SQL injection and why is it a concern for web applications?

Open an interactive chat with Bash

What are common practices to secure web applications against parameter-based vulnerabilities?

Open an interactive chat with Bash

CompTIA PenTest+ PT0-002

Information Gathering and Vulnerability Scanning

Your Score:

Settings & Objectives

Planning and Scoping

Information Gathering and Vulnerability Scanning

Attacks and Exploits

Reporting and Communication

Tools and Code Analysis

Random Mode

Random Mixed

Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.

Rotate by Objective

Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Hide Score

Check or uncheck an objective to set which questions you will receive.

Wipe Score

Report Issue

SAVE $49

CompTIA PenTest+ Voucher (PT0-002)

$404.00 $355.00

Bash, the Crucial Exams Chat Bot

AI Bot