CompTIA PenTest+ (PT0-003) — Question 82

During a preengagement activity with a new customer, a penetration tester looks for assets to test. Which of the following is an example of a target that can be used for testing?

Answer options

• A. API
• B. HTTP
• C. IPA
• D. ICMP

Correct answer: A

Explanation

The correct answer is A, API, as it represents a specific interface that can be tested for vulnerabilities. HTTP, while a protocol, is not a target in itself, and both IPA and ICMP do not represent specific testable assets in this context.