A penetration tester is performing external reconnaissance and wants to find all internet-facing devices that are running a database service. The tester wants to use Shodan to identify these devices. Which Shodan search query should the tester use?

port:3306 OR port:5432 OR port:27017

product:mysql OR product:postgresql OR product:mongodb

What is the primary purpose of using the Shodan API in a penetration test?

To bypass authentication on web applications

To automate the collection of information about internet-exposed devices and services

To create custom network packets for exploitation

To perform active vulnerability scanning of target networks

A penetration tester is building a script to automatically identify all devices in a client's IP range that are running a specific service. The tester wants to use the Shodan API and needs to handle rate limiting to avoid being blocked. Which approach should the tester use?

Use the shodan.host() method for each IP in the range.

Use the shodan.count() method to get the total count of results.

Use the shodan.exploits() method to search for vulnerabilities.

Use the shodan.search() method in a loop and add a time.sleep() between requests.

A penetration tester needs to automate the collection of Shodan data for a list of 500 IP addresses. The tester wants to retrieve the open ports and banners for each IP and save the results to a file for later analysis. Which approach should the tester use?

Use the Shodan website's search interface to manually look up each IP address.

Write a Python script using the Shodan API to loop through the IP list and call the host() method for each IP.

Export the IP list to a CSV and upload it to Shodan's bulk data service.

Use the Shodan CLI tool with the 'search' command and the list of IPs as a filter.

CompTIAPenTest+

Domain 2Objective 3

Reconnaissance Tools PT0-003 Practice Questions (Page 4)

Part of the Reconnaissance and enumeration domain, which accounts for 21% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~14–23 in this domain), expect 4–6 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

21%of the exam

Questions 16–20

16application · medium
A penetration tester is performing external reconnaissance and wants to find all internet-facing devices that are running a database service. The tester wants to use Shodan to identify these devices. Which Shodan search query should the tester use?
Select an answer first
17foundation · easy
What is the primary purpose of using the Shodan API in a penetration test?
Select an answer first
18expert · hard
A penetration tester is building a script to automatically identify all devices in a client's IP range that are running a specific service. The tester wants to use the Shodan API and needs to handle rate limiting to avoid being blocked. Which approach should the tester use?
Select an answer first
19application · medium
A penetration tester needs to automate the collection of Shodan data for a list of 500 IP addresses. The tester wants to retrieve the open ports and banners for each IP and save the results to a file for later analysis. Which approach should the tester use?
Select an answer first
20expert · medium
A penetration tester is scanning a target and needs to identify all open ports on a host, but the host is behind a firewall that is dropping ICMP packets. The tester wants to ensure the scan is not affected by the firewall's ICMP filtering. Which Nmap command should the tester use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.