Tools & Code Analysis
38 practice questions with explanations — 15 free to try
PassNova has 38 CompTIA PenTest+ practice questions on Tools & Code Analysis, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Tools & Code Analysis: example questions & answers
3 worked examples with answers and explanations below. Try 15 CompTIA PenTest+ questions free in the browser; the full 38-question Tools & Code Analysis bank is part of PassNova Premium.
Which framework is MOST commonly used to develop and launch exploits with modular payloads during a penetration test?
- ANessus
- BThe Autopsy digital forensics investigation platform
- CMetasploit✓
- DWireshark, a packet capture and protocol analyser
Answer: Metasploit is an exploitation framework providing a large library of exploits, payloads (such as Meterpreter), and post-exploitation modules, making it central to many engagements.
A tester wants to crack captured password hashes using GPU acceleration. Which tool is designed for this?
- ABurp Suite
- BNikto
- Chashcat✓
- DNmap
Answer: hashcat is a high-performance password recovery tool that leverages GPU acceleration to crack a wide range of hash types using dictionary, mask, and brute-force attacks.
Which tool functions as an intercepting proxy for analysing and modifying HTTP/HTTPS traffic during web application testing?
- AAircrack-ng
- BBurp Suite✓
- CJohn the Ripper
- DHydra
Answer: Burp Suite acts as a man-in-the-middle proxy that lets testers intercept, inspect, and modify web requests and responses, supporting tasks like parameter tampering and scanning.