Vulnerability Discovery and Analysis →easyMultiple ChoiceObjective-mapped

PT0-002 Vulnerability Discovery and Analysis Practice Question

Which tool is used for security auditing of AWS environments and can enumerate misconfigurations in IAM, S3, and other services?

⚠ Common exam trap

Watch out — candidates often confuse Prowler or ScoutSuite with Pacu because all three are AWS security tools, but only Pacu is designed for offensive enumeration and exploitation of misconfigurations, while the others are primarily compliance and reporting tools.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Pacu

Pacu is an open-source AWS security testing framework designed for offensive security audits. It includes modules that enumerate and exploit misconfigurations in IAM policies, S3 bucket permissions, and other AWS services, making it the correct tool for this specific purpose.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Pacu
Why this is correct
Correct: AWS-specific security testing framework.
✗
CrackMapExec
Why it's wrong here
CrackMapExec is for Windows/AD, not cloud.
✗
Prowler
Why it's wrong here
Prowler is for CIS benchmarks, not exploitation.
✗
ScoutSuite
Why it's wrong here
ScoutSuite is multi-cloud, but for AWS specifically, Pacu is more focused on exploitation.

Quick reference

AWS S3 Storage Class Comparison

Storage Class	Min Duration	Retrieval	Use Case
S3 Standard	None	Immediate	Frequently accessed data
S3 Standard-IA	30 days	Immediate	Infrequent access, rapid retrieval
S3 One Zone-IA	30 days	Immediate	Non-critical infrequent data
S3 Intelligent-Tiering	None	Immediate–hours	Unknown or changing access patterns
S3 Glacier Instant	90 days	Milliseconds	Archive with instant retrieval
S3 Glacier Flexible	90 days	Minutes–hours	Archive, flexible retrieval
S3 Glacier Deep Archive	180 days	Hours	Long-term compliance archive

Go deeper

Practice tests

Short scored sets — answer, get feedback, read the explanation, move on.

PT0-002 Practice Exam 2 — 20 Questions→PT0-002 Practice Test 3 — 25 Questions→

Domain-focused practice

Drill one exam section at a time instead of jumping between unrelated topics.

Vulnerability Discovery and Analysis Post-exploitation and Lateral Movement Engagement Management

Practice by question type

Pick a question style and work only that format until it feels routine.

Browse scenarios

Go deeper on a topic

One concept per page — questions, worked explanations, and a short concept guide.

Vulnerability Discovery and Analysis practice questions Reconnaissance and Enumeration practice questions PT0-003 fundamentals practice questions Post-exploitation and Lateral Movement practice questions

Keep going

Study guide All PT0-003 questions PT0-003 practice test

This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.

PT0-002 Vulnerability Discovery and Analysis Practice Question

Why each option matters

Option-by-option breakdown

AWS S3 Storage Class Comparison

Related to this question