PT0-002 Reconnaissance and Enumeration Practice Question
You are tasked with identifying the technologies used by a web application (e.g., web server, frameworks, libraries) during the reconnaissance phase. Which tool would you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
WhatWeb
WhatWeb is a tool for fingerprinting web technologies. It identifies software, frameworks, and other components by analyzing HTTP responses and page content. Wappalyzer is a browser extension but WhatWeb is command-line and scriptable.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Gobuster
Why it's wrong here
Gobuster is a high-speed brute-force tool used to enumerate directories, files, DNS subdomains, and virtual hosts by sending HTTP requests and matching response codes. It tells you whether a path exists but does not inspect the response body, headers, or scripting patterns to identify frameworks or libraries. Therefore, while it can reveal an admin panel or backup file, it cannot determine the underlying web technologies, making it unsuitable for the stated task.
- ✗
theHarvester
Why it's wrong here
theHarvester is an OSINT utility that queries search engines and public sources to harvest email addresses, hostnames, and subdomains associated with a target domain. It operates externally and never makes authenticated or direct HTTP requests to the target's web server to inspect banners, cookies, or JavaScript. Thus, it gathers reconnaissance metadata but lacks any mechanism for fingerprinting the specific web technologies in use.
- ✗
Nmap
Why it's wrong here
Nmap is a network scanner that performs host discovery, port scanning, and service/version detection via protocol-driven probes, and its version detection can sometimes identify the web server software. However, it does not recursively parse HTML, evaluate JavaScript files, detect CMS plugins, or identify frontend frameworks, so its web technology coverage is incidental and shallow. On a web app test, Nmap's version detection is a baseline, but it cannot replace a purpose-built HTTP fingerprinting tool.
- ✓
WhatWeb
Why this is correct
WhatWeb is a dedicated web technology identification tool that queries the target and analyzes a vast range of indicators, including HTTP headers, meta tags, cookie names, HTML source, and JavaScript variables. Its plugin-based architecture matches thousands of known signatures and reports technologies with confidence levels, covering CMS, frameworks, libraries, and server software. This makes it the correct choice for the stated task of identifying technologies used by a website.
Go deeper
Related to this question
Learn chapter
OSINT and Passive Reconnaissance
Key term
Fingerprinting
Fingerprinting is the process of gathering information about a target system or network to identify its operating system, services, software versions, and configuration details during the reconnaissance phase of a security assessment.
About these practice questions
One of 777 original PT0-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.