PT0-002 Reconnaissance and Enumeration Practice Question
A penetration tester is performing active reconnaissance on a target network and wants to enumerate SNMP devices to gather system information. The tester uses snmpwalk with a common community string. Which community string is most likely to provide read-write access if misconfigured?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
private
SNMP community strings are like passwords. 'public' is the default read-only community string, 'private' is the default read-write community string. 'internal' and 'manager' are less common defaults. The tester should try 'private' for potential read-write access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
private
Why this is correct
'private' is the default read-write community string in SNMP v1 and v2c, granting full write access to the device's MIB tree. With this string, an attacker can alter configuration parameters, change routing tables, disable interfaces, or even cause a denial of service by modifying system settings. In active reconnaissance, discovering 'private' is a high-severity finding because it signals complete administrative control over the SNMP-managed device, which is exactly why it is the correct answer here.
- ✗
public
Why it's wrong here
The community string 'public' is the well-known default for read-only access in SNMP v1/v2c. It allows an unauthenticated attacker to query MIB objects and enumerate system details such as interfaces, running processes, or user accounts, but it cannot modify any settings. Because this question asks for the default read-write string, 'public' is incorrect—it only provides information disclosure, not configuration control.
- ✗
internal
Why it's wrong here
'internal' is not a standard or default SNMP community string recognized by the protocol specifications or common vendor implementations. Defaults are almost universally 'public' (read-only) and 'private' (read-write); any other string like 'internal' would have to be manually configured by an administrator. During reconnaissance, it might appear in custom environments, but it is not the expected default read-write community string, making it an incorrect answer.
- ✗
manager
Why it's wrong here
'manager' is occasionally seen in enterprise network management platforms as a custom community string, but it is not a standard default in SNMP. The protocol's default community strings are 'public' and 'private'; 'manager' would only exist if an administrator explicitly set it, and even then it is uncommon. Since it is not the default read-write string for normal SNMP implementations, this option is incorrect for this question.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PT0-003 question from scratch — 777 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.