A penetration tester runs a vulnerability scan that identifies several issues across numerous customer hosts. The executive report outlines the following information: The client is concerned about…

The correct answer is C. Server 3. The client is concerned about the availability of its consumer-facing production application. A perimeter network web server is most likely hosting the public-facing application, making it the highest-priority target for additional manual testing. Even though other servers…

Submitted by lucia.co· Mar 6, 2026Vulnerability Discovery and Analysis

Question

A penetration tester runs a vulnerability scan that identifies several issues across numerous customer hosts. The executive report outlines the following information:

The client is concerned about the availability of its consumer-facing production application. Which of the following hosts should the penetration tester select for additional manual testing?

Exhibit

Options

AServer 1
BServer 2
CServer 3
DServer 4

How the community answered

(27 responses)

A
15% (4)
B
4% (1)
C
78% (21)
D
4% (1)

Explanation

The client is concerned about the availability of its consumer-facing production application. A perimeter network web server is most likely hosting the public-facing application, making it the highest-priority target for additional manual testing. Even though other servers (e.g., Developer QA Server) have more vulnerabilities, they are less critical to external users. The web server in the perimeter network is directly exposed to the internet, making it the most likely attack vector affecting availability.

Topics

#vulnerability prioritization#risk assessment#business impact#vulnerability analysis

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice