PT0-003 Question #173: Real Exam Question with Answer & Explanation

Question

During host discovery, a security analyst wants to obtain GeoIP information and a comprehensive summary of exposed services. Which of the following tools is best for this task?

Options

• AWiGLE.net
• BWHOIS
• CtheHarvester
• DCensys.io

Explanation

Censys.io is the best tool for this task because it is an internet-wide scanning platform that continuously indexes exposed services, open ports, certificates, and device information - and critically, it provides GeoIP data alongside comprehensive summaries of internet-facing assets, making it ideal for host discovery during reconnaissance.

Why the distractors are wrong:

• WiGLE.net (A) is a database focused on mapping wireless networks (Wi-Fi), not general host discovery or service enumeration.
• WHOIS (B) provides domain registration and ownership information (registrant, name servers, dates), but does not scan for exposed services or provide GeoIP summaries.
• theHarvester (C) is an OSINT tool used for gathering emails, subdomains, and names from public sources - not for scanning exposed services or GeoIP lookups.

Memory Tip: Think of Censys as a "census of the internet" - just like a population census counts and describes people, Censys counts and describes every exposed host, telling you where it is (GeoIP) and what it's running (services). If the question mentions exposed services + GeoIP, think Censys.

No community discussion yet for this question.