nerdexam
EC-Council

312-50V13 · Question #429

John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hij

The correct answer is A. loTSeeker. IoTSeeker is correct because it is specifically designed as an automated scanning tool that discovers IoT devices on a network and checks whether they are still using default, factory-set credentials - making them vulnerable to hijacking attacks, which matches the scenario exactl

Submitted by stefanr· Mar 6, 2026IoT Hacking

Question

John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of loT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?

Options

  • AloTSeeker
  • BloT Inspector
  • CAT&T loT Platform
  • DAzure loT Central

How the community answered

(36 responses)
  • A
    89% (32)
  • B
    6% (2)
  • C
    3% (1)
  • D
    3% (1)

Explanation

IoTSeeker is correct because it is specifically designed as an automated scanning tool that discovers IoT devices on a network and checks whether they are still using default, factory-set credentials - making them vulnerable to hijacking attacks, which matches the scenario exactly.

IoT Inspector (B) is a network analysis tool focused on monitoring and analyzing IoT device traffic and behavior for privacy/security research, not specifically scanning for default credentials. AT&T IoT Platform (C) is a connectivity and device management platform for building and deploying IoT solutions, not a hacking or vulnerability scanning tool. Azure IoT Central (D) is Microsoft's cloud-based IoT application platform for managing and connecting IoT devices at scale, also not a penetration testing or credential-scanning tool.

Memory Tip: Think of IoTSeeker as "seeking out" weak default passwords - the name itself implies actively hunting/seeking vulnerable IoT devices, which aligns perfectly with its purpose. The other options are legitimate enterprise platforms (AT&T and Azure are giveaways as major commercial brands), not offensive security tools.

Topics

#IoT Hacking#Vulnerability Scanning#Default Credentials#IoT Security Tools

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice