Exam PT1-002 topic 1 question 69 discussion

Actual exam question from CompTIA's PT1-002

Question #: 69
Topic #: 1

A penetration tester performs the following command:
curl `"I `"http2 https://www.comptia.org
Which of the following snippets of output will the tester MOST likely receive?
A.

B.

C.

D. [########################################################] 100%

Show Suggested Answer

Suggested Answer: A
Reference:
https://research.securitum.com/http-2-protocol-it-is-faster-but-is-it-also-safer/

by some_specialist at March 10, 2022, 9:50 p.m.

Comments

Submit Cancel

kiduuu

Highly Voted 2 years, 11 months ago

Answer A HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 71546 Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: ASP.NET_SessionId=a5lxz0w3ghwjq13lfrmfcvw1; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: ASP.NET_SessionId=a5lxz0w3ghwjq13lfrmfcvw1; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: __RequestVerificationToken=b2W2knS7e0tuyXj7eRpyTibHv-zFlWrxl562jh40teVksN0VK-aEETcPaaFQWFAHurAHLgZT-kRqOqosfIdjcQdcztE1; path=/; secure; HttpOnly Request-Context: appId=cid-v1:c069540b-f866-4f40-8789-8cc198aef527 X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Feature-Policy: self Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Public-Key-Pins: pin-sha256="wUFxwf12hU0xHiq8Cgz3fv/Y4H3DwaVl22RC1+n0/h4="; pin-sha256="ntPCN1f+CZzlQhaIE331czBRcAjdmi504yTaH4mK2Gw="; max-age=2592000; report-uri="https://domain.com/report" Date: Sun, 08 May 2022 10:06:48 GMT

upvoted 5 times

...

some_specialist

Highly Voted 3 years, 1 month ago

The command in the question appears wrong, but I ran the following and got associated results: curl -I http2 https://www.comptia.org curl: (6) Could not resolve host: http2 HTTP/2 200 cache-control: no-cache pragma: no-cache content-length: 76297 content-type: text/html; charset=utf-8 expires: -1 HttpOnly request-context: x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: self strict-transport-security: max-age=31536000; includeSubdomains; preload report-uri="https://domain.com/report"

upvoted 5 times

...

lifehacker0777

Most Recent 2 years, 1 month ago

Answer A curl -I --http2 https://www.comptia.org Curl options-> --http2 Use HTTP 2 -I Show document info only

upvoted 1 times

...

ronniehaang

2 years, 3 months ago

B. curl -l --http2 https://www.comptia.org <!DOCTYPE html> <html lang="en"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <meta charset="utf-8" /> <title>