nerdexam
EC-Council

312-50V12 · Question #65

Lewis, a professional hacker, targeted the IoT cameras and devices used by a target venture- capital firm. He used an information-gathering tool to collect information about the IoT devices…

The correct answer is C. Censys. Censys (Option C) is the correct answer because it is an internet-wide scanning and reconnaissance tool specifically designed to continuously monitor every reachable server and device on the Internet, mapping open ports, services, and attack surfaces. It also provides…

Submitted by asante_acc· Mar 4, 2026Wireless Network, Mobile, IoT, and OT Hacking

Question

Lewis, a professional hacker, targeted the IoT cameras and devices used by a target venture- capital firm. He used an information-gathering tool to collect information about the IoT devices connected to a network, open ports and services, and the attack surface area. Using this tool, he also generated statistical reports on broad usage patterns and trends. This tool helped Lewis continually monitor every reachable server and device on the Internet, further allowing him to exploit these devices in the network. Which of the following tools was employed by Lewis in the above scenario?

Options

  • ANeuVector
  • BLacework
  • CCensys
  • DWapiti

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    88% (36)
  • D
    7% (3)

Explanation

Censys (Option C) is the correct answer because it is an internet-wide scanning and reconnaissance tool specifically designed to continuously monitor every reachable server and device on the Internet, mapping open ports, services, and attack surfaces. It also provides statistical reports and trend analysis on broad internet usage patterns, making it a powerful tool for both security researchers and malicious actors like Lewis targeting IoT devices.

Why the distractors are wrong:

  • NeuVector (A) is a container security platform focused on protecting Kubernetes and Docker environments, not an internet-wide IoT scanning tool.
  • Lacework (B) is a cloud security and compliance monitoring platform used for threat detection in cloud environments, not for internet-wide device reconnaissance.
  • Wapiti (D) is a web application vulnerability scanner that audits web app security, not a broad IoT/device discovery tool.

Memory Tip: Think of Censys as performing a "census" of the internet - just like a population census counts and catalogs every person, Censys scans and catalogs every device, port, and service visible on the internet. If you see keywords like "every reachable device," "statistical trends," or "attack surface mapping" in a question, think Censys.

Topics

#Information Gathering#OSINT#IoT Hacking Tools#Censys

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice