Free Preparation Discussions
MENU
CompTIA Exam PT0-002 Topic 2 Question 67 Discussion
Topic #: 2
As part of active reconnaissance, penetration testers need to determine whether a protection mechanism is in place to safeguard the target's website against web application attacks. Which of the following methods would be the most suitable?
* Detecting a Web Application Firewall (WAF) helps penetration testers understand the protective measures in place and tailor their testing methods to bypass these defenses.
* Details:
A . Direct-to-origin testing: Useful for bypassing CDN but not specifically for detecting protective mechanisms like WAF.
B . Antivirus scanning: Not relevant for web application attacks.
C . Scapy packet crafting: Useful for network-level testing but not for detecting web application protections.
D . WAF detection: Identifies if a WAF is present, which is critical for understanding and bypassing web application defenses.
* Reference: WAF detection techniques are documented in web application security testing methodologies such as OWASP.
Yolando
2 months agoAnjelica
2 months agoRima
2 months agoLettie
11 days agoWilford
14 days agoLeslie
24 days agoOsvaldo
25 days agoTomoko
2 months agoAdelle
2 months agoGeraldo
26 days agoKris
1 months agoCorrie
1 months agoEdward
2 months agoBulah
22 days agoColeen
23 days agoBev
24 days agoLyla
25 days agoGilma
30 days agoElizabeth
2 months agoRoselle
2 months agoPeggie
2 months agoDorothy
2 months agoGwen
2 months agoSonia
1 months agoKenny
1 months agoAntonio
2 months agoKarl
2 months agoDorcas
3 months agoThurman
1 months agoBuck
1 months agoJacqueline
2 months agoNohemi
3 months agoEzekiel
3 months ago