Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 11 discussion

Actual exam question from CompTIA's PT0-002

Question #: 11
Topic #: 1

SIMULATION -
You are a penetration tester reviewing a client's website through a web browser.

INSTRUCTIONS -
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Show Suggested Answer

Suggested Answer: See explanation below.
Step 1: Generate Certificate Signing Request

Step 2: Submit CSR to the CA -
Step 3: Remove certificate from the server
Step 4: Install re-issued certificate on the server

by RightAsTain at Sept. 26, 2022, 5:16 a.m.

Comments

Submit Cancel

RRabbit_111

Highly Voted 8 months, 1 week ago

Generate a Certificate Signing Request (CSR): This step is the first step in the process of obtaining a new certificate. The CSR is a file that contains information about the website and the organization that operates it, as well as a public key. This file is then sent to a Certificate Authority (CA) to request a new certificate. Submit CSR to the CA: Once the CSR is generated, it is sent to the chosen CA. The CA will then validate the information in the CSR and issue a new certificate. Install re-issued certificate on the server: Once the new certificate is issued, it needs to be installed on the server. This step ensures that the new certificate is properly configured and can be used to secure the website. Remove certificate from server: After the new certificate is installed, the old certificate needs to be removed from the server to avoid any confusion or security issues.

upvoted 16 times

...

user548

Highly Voted 1 year, 7 months ago

#remediatecertificate Step 1: Generate Certificate Signing Request Step 2: Submit CSR to the CA - Step 3: Install re-issued certificate on the server Step 4: Remove certificate from the server

upvoted 8 times

user548

1 year, 7 months ago

#remediatesource LINE 6-9 The CSRF token is embedded in the HTML code. While not necessarily a vulnerability on its own, the way it is used in the code can potentially lead to security issues if not handled properly. LINE 10-12 The script tag is inserted within the select element. This allows for potential injection of arbitrary JavaScript code, which can be a security vulnerability XSS. LINE 14 The action attribute of the form element is populated with data from the server without proper escaping or validation. Depending on how the server handles this input, it might be a potential vulnerability. Line 20-26 The code contains multiple instances of input elements where the value attribute is populated with data from the server without proper escaping or validation. This can be a security risk if the data is not sanitized and validated correctly.

upvoted 7 times

user548

1 year, 7 months ago

#remediatecookies | Order | HTTP | SECURE | SameSite | |---|---|---|---| | 1 | False | True | True | | 2 | False | False | False | | 3 | False | False | False | | 4 | False | False | False | | 5 | False | False | False | | 6 | False | False | False | | 7 | False | False | False | | 8 | False | False | False | | 9 | False | False | False |

upvoted 4 times

JoseAju

2 months, 3 weeks ago

Hi, how do we tackle this part. True means tick the box? False leave it blank?

upvoted 1 times

...

Johnny34

Most Recent 1 year, 5 months ago

Can anyone explain why the ASP.net cookie is bad?

upvoted 4 times

...

Caoilfhion

1 year, 5 months ago

Heads up: THIS question was asking the test taker to remediate the MOST vulnerable thing. Comptia has deemed the certificate as the most vulnerable thing. HOWEVER, watch the wording because some students have reported being asked to remediate all 3! Good luck, guys!

upvoted 6 times

...

OnA_Mule

2 years, 1 month ago

The way this question is worded, it seems to have 2 parts. Part 1: Which is the highest vulnerability? Part 2: Remediate the vulnerability. For Part 1, everyone is assuming the expired certificate is the greater vulnerability, but I think having admin credentials in the source code of the web page is a much greater vulnerability than an expired certificate. The expired cert is definitely bad, but giving out admin credentials is so much worse. So getting rid of the commented admin and password lines should be the remediation. If you think a certificate is more important than admin rights to the website, by all means, choose this option, but I'll be going with the more severe vulnerability.

upvoted 1 times

Caoilfhion

1 year, 5 months ago

I agree with you, only because it feels like everyone and their mother knows to "inspect" to find that kind of stuff, even nontechie people. But unfortunately, CompTia has deemed the certificate the main problem. Taking this exam for my college degree, and the professor went over this PBQ with a "don't get tripped up here, they're just looking for the cert". It's the only PBQ directly from the exam he went over because of how much people trip up on this one, fixing all 3 or the "wrong" one :\

upvoted 4 times

...

AaronS1990

2 years, 2 months ago

Surely the Secure system box needs some input too? It looks to me as though there are checkboxes on the solution picture but nothing is ticked

upvoted 1 times

...

Frog_Man

2 years, 2 months ago

Note, there are 3 distinct labs here. Look at question #168 for the full display. People are only answering the first part.

upvoted 1 times

...

2Fish

2 years, 3 months ago

Step 1 - Generate a Certificate Signing Request Step 2 - Submit CSR to the CA Step 3 - Install re-issued certificate on the server Step 4 - Remove Certificate from Server https://www.examtopics.com/discussions/comptia/view/53668-exam-pt0-001-topic-1-question-142-discussion/

upvoted 6 times

...

Sborrainculo

2 years, 5 months ago

There is a misalagment between what you guys suggest in step 3 - 4 and the suggested answer. Step 3 Install Step 4 Remove. But it makes sense to do the opposite: remove the certificate first then install the new one

upvoted 2 times

boxv4

1 year, 8 months ago

You remove last. I've had to update CA signed certs and what we do is technically replace the file itself, but what gets updated is the cacerts file which contains the details of the loaded cert file that is either in p7b format or cer file. The removal part is optional for when we do it, as we remove the files as necessary or just keep them in place with a name .old to keep a historical track of the times we've updated the certificates.

upvoted 3 times

...

Caoilfhion

1 year, 5 months ago

You don't remove an old cert before installing the new one, because you will close your connection unexpectedly and lock yourself out. Cert removal is last, if at all...

upvoted 1 times

...

ryanzou

2 years, 8 months ago

Step 1 - Generate a Certificate Signing Request Step 2 - Submit CSR to the CA Step 3 - Install re-issued certificate on the server Step 4 - Remove Certificate from Server

upvoted 6 times

...

RightAsTain

2 years, 8 months ago

An expired cert still has the public key and can complete the TLS handshake. I trouble shoot cert issues at work all the time so that definitely isn't a vulnerability. Look at the HTML. The username and password are commented out. Who cares about cookies and a secure connection when you can have access to the admin account. lol

upvoted 8 times

Mr_BuCk3th34D

2 years, 5 months ago

How can you tell if the cert is expired? What if one created that question from old exam back in 2018? There's no info there to confirm that the cert is really expired. Unsecure cookies seems like a higher vulnerability to me. Talking about the username and password, those are not the credentials are just the field names.

upvoted 3 times

boxv4

1 year, 8 months ago

On the coockies, there were sessions dated the year 2019. therefore we can safely assume the certs have expired. I asked myself the same question.

upvoted 3 times

...

Mr_BuCk3th34D

2 years, 5 months ago

Also - If the cookie transport security is not set up properly, the hacker can access sensitive information stored in those cookies, regardless if the Web application uses SSL. The attacker can then gather sensitive data stored in those cookies.

upvoted 3 times

...