nerdexam
CompTIA

PT0-001 · Question #17

Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

The correct answer is A. Shodan E. Maltego. Shodan and Maltego are purpose-built OSINT platforms used to gather intelligence on targets from publicly available sources before active testing begins.

Reconnaissance and enumeration

Question

Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

Options

  • AShodan
  • BSET
  • CBeEF
  • DWireshark
  • EMaltego
  • FDynamo

How the community answered

(39 responses)
  • A
    87% (34)
  • B
    3% (1)
  • D
    8% (3)
  • F
    3% (1)

Why each option

Shodan and Maltego are purpose-built OSINT platforms used to gather intelligence on targets from publicly available sources before active testing begins.

AShodanCorrect

Shodan is a search engine that indexes internet-connected devices, open ports, banners, and services, making it a primary OSINT tool for passively discovering exposed infrastructure on a target without direct interaction.

BSET

SET (Social Engineering Toolkit) is an active attack framework for crafting phishing campaigns and social engineering exploits, not a passive intelligence-gathering tool.

CBeEF

BeEF (Browser Exploitation Framework) is used to hook browsers and launch client-side attacks against already-identified targets, not to collect open-source intelligence.

DWireshark

Wireshark is a packet capture and analysis tool used during active network monitoring on an internal segment, not for gathering publicly available intelligence about a target.

EMaltegoCorrect

Maltego is a link-analysis and OSINT platform that aggregates data from public sources such as DNS, WHOIS, social media, and email to map relationships between organizations, people, and infrastructure, making it essential for pre-engagement reconnaissance.

FDynamo

Dynamo is not a recognized penetration testing or OSINT tool in standard security toolsets.

Concept tested: OSINT tools for penetration testing reconnaissance

Source: https://help.shodan.io/the-basics/what-is-shodan

Topics

#OSINT#Shodan#Maltego#open source intelligence

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice