CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code CAPen
Exam Name Certified AppSec Pentester (CAPen)
Vendor The SecOps Group
Total Questions 303
Last Updated 26-Oct, 2026
Free CAPen Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free CAPen Practice Questions

Explore 4 free practice questions for the The SecOps Group CAPen exam and review the answers and explanations to support your preparation.

  1. Question 1

    Drag & Drop

    Identify email addresses belonging to a company using OSINT techniques.

    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer

    See the Explanation.

    Explanation

    1. Use Hunter.io or theHarvester tool:
    theHarvester -d target.com -b google
    2. Search Google with: @target.com
    3. Use LinkedIn or GitHub advanced search: site:github.com "@target.com"
    4. Collect emails for phishing simulation (if permitted).
    5. Verify email validity using tools like EmailHippo or Debounce.io.
    Discover open directories with potentially sensitive files using Google dorks.

  2. Question 2

    Drag & Drop

    Discover open directories with potentially sensitive files using Google dorks.

    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer

    See the Explanation.

    Explanation

    Use: intitle:"index of" "parent directory" +passwd
    This searches for open directories with file listings containing "passwd".
    Replace passwd with other keywords like .sql, .bak, .env, etc.
    Confirm findings are in non-sensitive environments or demos.
    Access is legal only if no authentication is bypassed or required

  3. Question 3

    Drag & Drop

    Find public documents on a government site that may contain sensitive metadata using Google dorks.

    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer

    See the Explanation.

    Explanation

    Usethedork: site:gov filetype:pdf
    Tofindspecific content, extend it: site:gov filetype:pdf confidential
    Downloada few sample PDFs (legally and ethically).
    Useexiftool filename.pdf or pdfinfo filename.pdf to extract metadata.
    Checkforusernames, software versions, or timestamps that leak OSINT data.

  4. Question 4

    Drag & Drop

    Use a Google dork to identify login pages of vulnerable sites running PHP.

    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer

    See the Explanation.

    Explanation

    OpenGoogle and use the dork: inurl:login.php intitle:"Login"
    Thisquerytargets pages with “login.php” in the URL and “Login” in the title.
    Reviewresults and pick non-government, non-critical sites for testing only.
    Combinewith site: to target specific domains, e.g., site:.edu.
    Validatefindings using a test environment to ensure ethical usage.