Exam PT0-002 topic 1 question 192 discussion

Actual exam question from CompTIA's PT0-002

Question #: 192
Topic #: 1

During a web application test, a penetration tester was able to navigate to https://company.com and view all links on the web page. After manually reviewing the pages, the tester used a web scanner to automate the search for vulnerabilities. When returning to the web application, the following message appeared in the browser: unauthorized to view this page. Which of the following BEST explains what occurred?

A. The SSL certificates were invalid.
B. The tester IP was blocked.
C. The scanner crashed the system.
D. The web page was not found.

Show Suggested Answer

Suggested Answer: B 🗳️

by Orean at Feb. 27, 2023, 8:33 p.m.

Comments

Submit Cancel

cy_analyst

10 months ago

Selected Answer: B

Invalid SSL certificates may prevent the tester from accessing the site entirely, but would not cause an "unauthorized" message. A scanner crashing the system may cause the web application to become unavailable, but it would not result in an "unauthorized" message upon return. Similarly, if the web page was not found, the error message would typically indicate a 404 or similar error, not an "unauthorized" message.

upvoted 2 times

...

Orean

11 months, 2 weeks ago

Selected Answer: B

The only logical explanation. The tester's IP was most likely blocked—possibly automatically so—due to generating excessive traffic from their reconnaissance. A is incorrect. If it were attributable to an expired certificate, the user would've received an explicit warning. You can rule out C because the system was clearly operational enough to display that message. It can't be D, either, because the tester was able to find it initially. Plus, you'd receive a 404 error if that were the case.

upvoted 4 times

...