20+ practice questions focused on Information Gathering and Vulnerability Scanning — one of the most tested topics on the CompTIA PenTest+ PT0-002 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Information Gathering and Vulnerability Scanning PracticeDuring a penetration test, you need to gather information about a target's email addresses and employee names without directly interacting with the target's systems. Which tool is most appropriate for this passive reconnaissance task?
Explanation: theHarvester is an OSINT tool designed to gather emails, subdomains, IPs, and employee names from public sources like search engines and social media. Maltego is more for relationship mapping, Shodan for internet-facing devices, and Censys for certificate and network data.
You are performing a vulnerability scan on a web application and notice that the scanner reports a high-severity SQL injection vulnerability. However, manual testing confirms that the input is properly sanitized. Which term best describes this situation?
Explanation: A false positive occurs when a scanner incorrectly identifies a vulnerability that does not exist. This is common in automated vulnerability scanning and requires manual verification.
Which Nmap scan type sends SYN packets to determine open ports without completing the TCP three-way handshake?
Explanation: The SYN scan (-sS) sends a SYN packet and if a SYN/ACK is received, the port is considered open; it does not complete the handshake, making it stealthier than a full connect scan.
You are conducting a penetration test and need to identify subdomains of a target domain using a passive approach that does not generate traffic to the target's servers. Which technique should you use?
Explanation: Certificate transparency logs (e.g., crt.sh) are public logs of SSL/TLS certificates, often containing subdomain names. Querying them is passive and does not interact with the target.
During a penetration test, you want to discover API endpoints and hidden parameters in a web application. Which tool combination is most effective for this task?
Explanation: Arjun is specifically designed for parameter discovery, while ffuf can be used to bruteforce both directories and parameters. Together they effectively find API endpoints and parameters. gobuster is for directory/file enumeration, not specifically for parameters.
+15 more Information Gathering and Vulnerability Scanning questions available
Practice all Information Gathering and Vulnerability Scanning questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Information Gathering and Vulnerability Scanning. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Information Gathering and Vulnerability Scanning questions on the PT0-002 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Information Gathering and Vulnerability Scanning is tested as part of the CompTIA PenTest+ PT0-002 blueprint. Practicing with targeted Information Gathering and Vulnerability Scanning questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free PT0-002 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Information Gathering and Vulnerability Scanning is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Information Gathering and Vulnerability Scanning practice session with instant scoring and detailed explanations.
Start Information Gathering and Vulnerability Scanning Practice →