ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 283 - PT0-002 discussion

Report
Export

A penetration tester is conducting an unknown environment test and gathering additional information that can be used for later stages of an assessment. Which of the following would most likely produce useful information for additional testing?

A.
Searching for code repositories associated with a developer who previously worked for the target company code repositories associated with the
Answers
A.
Searching for code repositories associated with a developer who previously worked for the target company code repositories associated with the
B.
Searching for code repositories target company's organization
Answers
B.
Searching for code repositories target company's organization
C.
Searching for code repositories associated with the target company's organization
Answers
C.
Searching for code repositories associated with the target company's organization
D.
Searching for code repositories associated with a developer who previously worked for the target company
Answers
D.
Searching for code repositories associated with a developer who previously worked for the target company
Suggested answer: B

Explanation:

Code repositories are online platforms that store and manage source code and other files related to software development projects. Code repositories can contain useful information for additional testing, such as application names, versions, features, functions, vulnerabilities, dependencies, credentials, comments, or documentation. Searching for code repositories associated with the target company's organization would most likely produce useful information for additional testing, as it would reveal the software projects that the target company is working on or using, and potentially expose some weaknesses or flaws that can be exploited. Code repositories can be searched by using tools such as GitHub, GitLab, Bitbucket, or SourceForge1. The other options are not as likely to produce useful information for additional testing, as they are not directly related to the target company's software development activities. Searching for code repositories associated with a developer who previously worked for the target company may not yield any relevant or current information, as the developer may have deleted, moved, or updated their code repositories after leaving the company. Searching for code repositories associated with the target company's competitors or customers may not yield any useful or accessible information, as they may have different or unrelated software projects, or they may have restricted or protected their code repositories from public view.

asked 02/10/2024
Aparecido da Silva Lemos
25 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first