PT0-002 · Question #141
An Nmap scan shows open ports on web servers and databases. A penetration tester decides to run WPScan and SQLmap to identify vulnerabilities and additional information about those systems. Which of…
The correct answer is C. Limit invasiveness based on scope. The penetration tester is using specific tools like WPScan and SQLmap after an Nmap scan to focus their vulnerability assessment on identified web servers and databases. This targeted approach aims to ensure the assessment remains within defined boundaries and avoids…
Question
An Nmap scan shows open ports on web servers and databases. A penetration tester decides to run WPScan and SQLmap to identify vulnerabilities and additional information about those systems. Which of the following is the penetration tester trying to accomplish?
Options
- AUncover potential criminal activity based on the evidence gathered.
- BIdentify all the vulnerabilities in the environment.
- CLimit invasiveness based on scope.
- DMaintain confidentiality of the findings.
How the community answered
(34 responses)- A12% (4)
- B9% (3)
- C74% (25)
- D6% (2)
Why each option
The penetration tester is using specific tools like WPScan and SQLmap after an Nmap scan to focus their vulnerability assessment on identified web servers and databases. This targeted approach aims to ensure the assessment remains within defined boundaries and avoids unnecessary intrusiveness.
While uncovering criminal activity might be a byproduct of some forensic investigations, it is not the primary goal of a penetration test focused on identifying system vulnerabilities.
It is practically impossible to identify *all* vulnerabilities in an entire environment, and penetration tests are typically scoped to specific systems or types of vulnerabilities.
By using tools like WPScan for WordPress-specific vulnerabilities and SQLmap for SQL injection on databases, the tester is focusing their efforts on the specific services and technologies discovered by Nmap. This method ensures the assessment remains within the defined scope, targeting relevant systems and vulnerabilities without broadly scanning unrelated assets, thus limiting invasiveness.
Maintaining confidentiality of findings is a general professional responsibility for a penetration tester, not the specific accomplishment of choosing targeted tools like WPScan and SQLmap.
Concept tested: Scoped penetration testing and tool selection
Topics
Community Discussion
No community discussion yet for this question.