PT0-002 Question #47: Real Exam Question with Answer & Explanation

The correct answer is B: "cisco-ios" "no-password". {"question_number": 10, "correct_answer": "B", "explanation": "Shodan is a search engine for Internet-connected devices. The search string 'cisco-ios' 'no-password' locates Cisco IOS devices that have no authentication password configured, directly meeting the client's requiremen

Information Gathering and Vulnerability Scanning

Question

A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?

Options

A"cisco-ios" "admin+1234"
B"cisco-ios" "no-password"
C"cisco-ios" "default-passwords"
D"cisco-ios" "last-modified"

Explanation

{"question_number": 10, "correct_answer": "B", "explanation": "Shodan is a search engine for Internet-connected devices. The search string 'cisco-ios' 'no-password' locates Cisco IOS devices that have no authentication password configured, directly meeting the client's requirement to find Cisco devices with no authentication requirements. 'admin+1234' (A) searches for devices with a specific default credential, not no authentication. 'default-passwords' (C) is not a standard Shodan filter and would return irrelevant results. 'last-modified' (D) is an HTTP header filter unrelated to Cisco authentication state. 'no-password' is a known Shodan banner term that appears in Cisco device telnet/SSH banners when no login password has been set.", "generated_by": "claude-sonnet", "llm_judge_score": 5}

Topics

#Shodan#Reconnaissance#Vulnerability Scanning#Unauthenticated Access

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice Browse All PT0-002 Questions