Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 16 discussion

Actual exam question from CompTIA's PT0-002

Question #: 16
Topic #: 1

A penetration tester was brute forcing an internal web server and ran a command that produced the following output:

However, when the penetration tester tried to browse the URL http://172.16.100.10:3000/profile, a blank page was displayed.
Which of the following is the MOST likely reason for the lack of output?

A. The HTTP port is not open on the firewall.
B. The tester did not run sudo before the command.
C. The web server is using HTTPS instead of HTTP.
D. This URI returned a server error.

Show Suggested Answer

Suggested Answer: D 🗳️

by sidonpc at Sept. 12, 2022, 9:56 p.m.

Comments

Submit Cancel

sidonpc

Highly Voted 2 years, 10 months ago

Selected Answer: D

This is incorrect It should be D mainly because if the firewall was blocking the port than none of the web directories would have successful(200 codes) the 500 code is a server side error code meaning the correct answer is D.

upvoted 24 times

rintaka21

2 years, 10 months ago

agree on this one, it should be D.

upvoted 8 times

...

RRabbit_111

Highly Voted 2 years, 6 months ago

Selected Answer: D

The most likely reason for the lack of output is D. This UR(L) returned a server error. This is because the output of the dirb command shows that the profile URL responded with an HTTP Status Code 500, which indicates that the web server experienced an internal server error when the request was received. This could be caused by a number of things, such as a misconfigured server or a syntax error in the code. A is incorrect because the output of the dirb command indicates that the HTTP port is open. B is incorrect because the output indicates that the command was run without sudo and still produced a response. C is incorrect because the output of the dirb command indicates that the web server is using HTTP, not HTTPS.

upvoted 13 times

...

bieecop

Most Recent 10 months, 2 weeks ago

Selected Answer: D

Based on the provided output, the penetration tester performed a directory brute force using the Dirb tool on the target web server at http://172.16.100.10:3000. The output shows several URLs that were scanned, including http://172.16.100.10:3000/profile, which returned a server error (CODE: 500). A server error (HTTP status code 500) typically indicates an issue on the server side, such as a misconfiguration or an internal error that prevented the proper handling of the request. This can result in a blank page or an error message being displayed.

upvoted 1 times

...

pizzaThyme

12 months ago

Selected Answer: D

Gots to be D my boy. 500 Internal Server Error as compared to 200 OK status for get/post requests

upvoted 1 times

...

MeisAdriano

1 year ago

Selected Answer: D

As you can see in the generated result, the ...profile generated an HTTP STATUS 500 (internal server error), others have HTTP STATUS 200 ("OK")

upvoted 2 times

...

LiveLaughToasterBath

1 year, 6 months ago

Selected Answer: D

I googled the 500 error, for my own piece of mind. Shows as a generic, server-side error.

upvoted 1 times

...

bracokey

1 year, 8 months ago

The answer is A. this is because of the characteristics of port 3000. This port functions as a local host web dev port and it would seem not to respond to remote requests like port 80, 443 etc. A bit like ip 127.0.0.1

upvoted 1 times

KeToopStudy

1 year, 7 months ago

The port is not filtered by the firewall ... if that was the case you wold not receive 200 responses. And ports can be assign any function you want. It is not obligatory for a web server to run on 80/443, it can run on whathever port you want.

upvoted 1 times

...

Skater_Grace

1 year, 9 months ago

Selected Answer: D

I think it is D.

upvoted 1 times

...

MysterClyde

2 years, 2 months ago

The answer is D. This is a classic error a web admin or end user reports: https://support.cpanel.net/hc/en-us/articles/360051006293--HTTP-ERROR-500-PHP-website-blank-showing-a-white-page-or-Internal-Server-Error

upvoted 1 times

...

KingIT_ENG

2 years, 4 months ago

D is correct

upvoted 2 times

...

beamage

2 years, 5 months ago

Selected Answer: A

The client would have received a 500 error code in the browser, Not a blank page. Firewall I'm thinking....

upvoted 2 times

beamage

2 years, 5 months ago

When you visit a website your browser sends a request over to the server where the site is hosted. The server takes this request, processes it, and sends back the requested resources (PHP, HTML, CSS, etc.) along with an HTTP header. The HTTP also includes what they call an HTTP status code. A status code is a way to notify you about the status of the request. It could be a 200 status code which means “Everything is OK” or a 500 status code which means something has gone wrong.

upvoted 1 times

...

The_F00L

2 years, 5 months ago

Answer is D. Know your ouptut, and know your HTTP. Keep an eye on those response codes. 500 is a server error.

upvoted 5 times

...

chameleon_eh

2 years, 6 months ago

The answer is D, based on the error code. https://developer.mozilla.org/en-US/docs/Web/HTTP/Status

upvoted 4 times

...

Masco

2 years, 8 months ago

The correct answer is D and I second sidonpc

upvoted 3 times

...

petercorn

2 years, 9 months ago

Selected Answer: D

Agree with answer D.

upvoted 3 times

petercorn

2 years, 9 months ago

The HTTP status code 500 is a generic error response. It means that the server encountered an unexpected condition that prevented it from fulfilling the request.

upvoted 4 times

...