In order to give an answer, we need to use some technical terminology. But conveniently, in this case, the meaning of the technical terms is not very far from their everyday meaning.
If given the information that $A$ has happened, or equivalently here, is true, the probability that $B$ happens is $2/100$, then the probability of $X$, the worst scenario, is indeed $\frac{1}{120}\times \frac{2}{100}.$ This product is $1/6000$, which is not far from your answer. It actually turns out to be roughly $0.000167$. You rounded down; rounding up gives a result closer to the truth. I would probably use something like $0.00017$.
If $A$ and $B$ are independent, again the probability of the worst possible scenario is the product. Here independent has a strictly defined technical meaning, but it is fairly close to the informal meaning of "independent."
But the situation can be more complicated. Suppose that $A$ is lightning strike, and $B$ is fire. Then $A$ and $B$ are not independent (lightning strikes can cause fires). In that case, we would have to know something more about the degree of dependence/independence between lightning strikes and fires to find the probability of the worst case. Certainly that probability would be greater than the simple product $1/6000$.
Added: The added information clears things up a lot. We are in the first case that I discussed. The probability that the disease is present is estimated at $1/120$. Given that the disease is present, the probability of non-detection is said to be $2/100$. Then the calculation that gives probability that the disease is present and remains undetected is correct, the answer is indeed $1/6000$.
A few cautions, however. There is no reason to trust fully the estimates $1/120$ and $2/100$. Estimates are usually based on whole populations, and individual factors may make the general probability estimate not accurate. The numbers $1/120$ and $2/100$ are suspiciously simple-looking, they are undoubtedly rough approximations. Also, medical improvements tend to lower probabilities over time. And the $2/100$ non-detection rate does not necessarily reflect the probability under best practices.