PT0-002 Reconnaissance and Enumeration Practice Question
A penetration tester is performing reconnaissance on a target web application. The tester wants to identify the web server software and version without causing any disruption. Which tool is specifically designed for this purpose and can also enumerate other web technologies?
⚠ Common exam trap
The trap here is assuming that any tool that can identify a web server is equally suited for detailed technology enumeration, when specialized tools like WhatWeb provide more comprehensive and accurate results.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
WhatWeb
WhatWeb is specifically designed for web technology fingerprinting, including server software and version, CMS, and JavaScript libraries. It is non-intrusive and efficient for reconnaissance. Nmap is more general, Wireshark requires manual analysis, and Nikto focuses on vulnerabilities rather than enumeration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Nikto
Why it's wrong here
Nikto is a web server scanner that checks for vulnerabilities and misconfigurations. While it can identify server software in its output, its primary purpose is vulnerability scanning, not technology enumeration. It is also more intrusive, sending many requests that could be logged or trigger alerts, making it less suitable for stealthy reconnaissance.
- ✗
Wireshark
Why it's wrong here
Wireshark is a network protocol analyzer that captures and inspects traffic. While it can reveal web server details if traffic is captured, it is not a dedicated web technology enumeration tool. It requires the tester to generate traffic and analyze packets manually, which is inefficient for identifying web technologies during reconnaissance.
- ✓
WhatWeb
Why this is correct
WhatWeb is a web scanner designed to fingerprint web technologies, including server software, CMS, JavaScript libraries, and more. It sends requests to the target and analyzes responses to identify the technologies in use. It is non-intrusive and ideal for reconnaissance, making it the best choice for this scenario.
- ✗
Nmap with the -sV flag
Why it's wrong here
Nmap with -sV performs version detection on open ports, including web servers. However, it is a general-purpose port scanner and may not provide detailed web technology enumeration like specific web application fingerprinting tools. It can identify the server software but is less focused on web technologies such as JavaScript frameworks or CMS.
Go deeper
Related to this question
Learn chapter
BloodHound and Active Directory Enumeration
Key term
Enumeration
Enumeration is the systematic process of extracting detailed information about a target system, such as user accounts, network shares, services, and configurations, used during the reconnaissance phase of a security assessment.
Key term
Nikto
Nikto is an open-source web server scanner that tests for potentially dangerous files, outdated server software, and configuration issues.
About these practice questions
This PT0-003 question is part of Courseiva's 777-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.