CompTIA PT0-003 Question Answer
A penetration tester finds it is possible to downgrade a web application ' s HTTPS connections to HTTP while performing on-path attacks on the local network. The tester reviews the output of the server response to:
curl -s -i https://internalapp/
HTTP/2 302
date: Thu, 11 Jan 2024 15:56:24 GMT
content-type: text/html; charset=iso-8659-1
location: /login
x-content-type-options: nosniff
server: Prod
Which of the following recommendations should the penetration tester include in the report?
CompTIA PT0-003 Summary
- Vendor: CompTIA
- Product: PT0-003
- Update on: Apr 29, 2026
- Questions: 330
