exam questions

Exam PT1-002 All Questions

View all questions & answers for the PT1-002 exam

Exam PT1-002 topic 1 question 101 discussion

Actual exam question from CompTIA's PT1-002
Question #: 101
Topic #: 1
[All PT1-002 Questions]

A company that developers embedded software for the automobile industry has hired a penetration-testing team to evaluate the security of its products prior to delivery. The penetration-testing team has stated its intent to subcontract to a reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits. The software company has requested additional background investigations on the reverse-engineering team prior to approval of the subcontract. Which of the following concerns would BEST support the software company's request?

  • A. The reverse-engineering team may have a history of selling exploits to third parties.
  • B. The reverse-engineering team may use closed-source or other non-public information feeds for its analysis.
  • C. The reverse-engineering team may not instill safety protocols sufficient for the automobile industry.
  • D. The reverse-engineering team will be given access to source code for analysis.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Hashlife
Highly Voted 3 years ago
This is D. IDK why you guys pick the wrong answer in the discussion and vote because it's all you see. A pentesting team can still sell code to third parties even with a clean background. They want a background check to have full information on the team in case they reveal the source code.
upvoted 7 times
KJ44
2 years, 8 months ago
The reason it is A is bc you don't need reverse-engineering if you have the source code.
upvoted 6 times
shakevia463
2 years, 2 months ago
Reverse engineering team will still see the source code and they need to have background checks
upvoted 1 times
shakevia463
2 years, 2 months ago
subcontract to a reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits
upvoted 1 times
shakevia463
2 years, 2 months ago
they will be able to sell the exploits
upvoted 1 times
...
...
...
...
...
tokhs
Highly Voted 3 years, 5 months ago
A makes sense to me
upvoted 5 times
...
KJ44
Most Recent 2 years, 8 months ago
Selected Answer: A
"reverse-engineering" isn't needed if you have the source code, so it's probably not D.
upvoted 4 times
...
[Removed]
2 years, 8 months ago
Selected Answer: A
This is a tough one, I'm going to go with A because the penetration testers have the intention of creating exploits, so obviously exploits are going to be the concern in this scenario no doubt about that. That's just my two cents anyways.
upvoted 3 times
...
BinarySoldier
3 years, 5 months ago
I would take A here too
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago