Free Preparation Discussions
MENU
CompTIA Exam PT0-002 Topic 2 Question 67 Discussion
Topic #: 2
As part of active reconnaissance, penetration testers need to determine whether a protection mechanism is in place to safeguard the target's website against web application attacks. Which of the following methods would be the most suitable?
* Detecting a Web Application Firewall (WAF) helps penetration testers understand the protective measures in place and tailor their testing methods to bypass these defenses.
* Details:
A . Direct-to-origin testing: Useful for bypassing CDN but not specifically for detecting protective mechanisms like WAF.
B . Antivirus scanning: Not relevant for web application attacks.
C . Scapy packet crafting: Useful for network-level testing but not for detecting web application protections.
D . WAF detection: Identifies if a WAF is present, which is critical for understanding and bypassing web application defenses.
* Reference: WAF detection techniques are documented in web application security testing methodologies such as OWASP.
Yolando
3 months agoAnjelica
3 months agoRima
3 months agoLettie
2 months agoWilford
2 months agoLeslie
2 months agoOsvaldo
2 months agoTomoko
3 months agoAdelle
3 months agoGeraldo
2 months agoKris
3 months agoCorrie
3 months agoEdward
3 months agoBulah
2 months agoColeen
2 months agoBev
2 months agoLyla
2 months agoGilma
2 months agoElizabeth
3 months agoRoselle
3 months agoPeggie
4 months agoDorothy
4 months agoGwen
4 months agoSonia
3 months agoKenny
3 months agoAntonio
3 months agoKarl
3 months agoDorcas
4 months agoThurman
3 months agoBuck
3 months agoJacqueline
3 months agoNohemi
4 months agoEzekiel
4 months ago