PT0-002 Domain 2: Attacks and Exploits

Two designs were proposed. Design A would exploit misconfigured cloud storage. Design B would test wireless segmentation. The team must pick the approach aligned with vendor best practices. Which choice is correct?

Multiple choice — select one answer

Answer choices

  1. a. Validate local and domain privilege boundaries
  2. b. Verify bucket/blob ACLs and policies
  3. c. Validate guest vs corporate isolation
  4. d. Validate input sanitization on directory queries

Architectural breakdown & explanation

Misconfigurations are common findings. Compare with Validate guest vs corporate isolation: Wireless tests find isolation gaps.

Correct answer(s): b. Verify bucket/blob ACLs and policies

Exam domain: Domain 2: Attacks and Exploits (45% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the CompTIA PenTest+ bank. Run a full timed practice exam with domain-weighted random questions in your browser.