A penetration tester is performing an external network assessment and conducts passive reconnaissance using Shodan. What type of information does Shodan provide?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Shodan is a search engine that indexes internet-facing services by continuously scanning the internet and cataloging banners, open ports, software versions, and device types. A is wrong because Shodan collects data from external internet scans, not internal network ARP tables.
Full explanation below image
Full Explanation
B is correct because Shodan is a search engine that indexes internet-facing services by continuously scanning the internet and cataloging banners, open ports, software versions, and device types. A is wrong because Shodan collects data from external internet scans, not internal network ARP tables. C is wrong because employee email harvesting is done with tools like theHarvester, not Shodan. D is wrong because Shodan can identify misconfigured servers but does not expose private keys; that would require a separate vulnerability.