CompTIA
PT0-003 · Question #32
A penetration tester completed OSINT work and needs to identify common subdomains for mydomain.com. Which of the following is the best command for the tester to use?
Sign in or unlock PT0-003 to reveal the answer and full explanation for question #32. The question stem and answer options stay visible for context.
Submitted by parkjh· Mar 6, 2026Reconnaissance and enumeration
Question
A penetration tester completed OSINT work and needs to identify common subdomains for mydomain.com. Which of the following is the best command for the tester to use?
Options
- Anslookup mydomain.com >> /path/to/results.txt
- Bcrunch 1 2 | xargs -n 1 -I 'X' nslookup X.mydomain.com
- Dcat wordlist.txt | xargs -n 1 -I 'X' host X.mydomain.com
Unlock PT0-003 to see the answer
You've previewed enough free PT0-003 questions. Unlock PT0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#subdomain enumeration#OSINT#reconnaissance tools#DNS lookup