Exam PT1-002 topic 1 question 39 discussion

Actual exam question from CompTIA's PT1-002

Question #: 39
Topic #: 1

A penetration tester obtained the following results after scanning a web server using the dirb utility:
...

GENERATED WORDS: 4612 -
---- Scanning URL: http://10.2.10.13/ ----
+ http://10.2.10.13/about (CODE:200|SIZE:1520)
+ http://10.2.10.13/home.html (CODE:200|SIZE:214)
+ http://10.2.10.13/index.html (CODE:200|SIZE:214)
+ http://10.2.10.13/info (CODE:200|SIZE:214)
...

DOWNLOADED: 4612 `" FOUND: 4 -
Which of the following elements is MOST likely to contain useful information for the penetration tester?

A. index.html
B. about
C. info
D. home.html

Show Suggested Answer

Suggested Answer: B 🗳️

by Davar39 at Jan. 7, 2022, 7:40 p.m.

Comments

Submit Cancel

strawberryspring

Highly Voted 3 years, 4 months ago

B. The about file generally has version numbers, which come in handy whenever you’re looking for a vuln pertaining to an application in particular.

upvoted 5 times

...

CCSXorabove

Most Recent 1 year ago

Selected Answer: B

At the Comptia Book says about is the most important to find useful information about the business.

upvoted 1 times

...

isaphiltrick

1 year, 11 months ago

The correct answer is B - about. Look at the file size of each plus from a OSINT perspective, you can learn about the company and its leadership as ammunition for social engineering attacks.

upvoted 1 times

...

Anarckii

2 years, 2 months ago

Selected Answer: A

this should be A. as it will provide further directories/paths for the pentester to further look at the website. About is great, but it is a vague presentation of information available

upvoted 1 times

...

Davar39

3 years, 7 months ago

B seems correct, based on the directory size and information he might collect from the directory to help the OSINT recon.

upvoted 3 times

...