Exam CFR-310 topic 1 question 26 discussion

B. Reconnaissance Explanation: Shodan is a search engine used to find internet-connected devices and systems, such as servers, webcams, routers, and more. Attackers typically use Shodan in the reconnaissance phase to gather information about potential targets, such as open ports, services, and system vulnerabilities, before launching an attack. Why the other answers are incorrect: A. Scanning: Scanning involves actively probing a specific target to find open ports or vulnerabilities, typically using tools like Nmap. Shodan is more passive, providing information already indexed from across the internet. C. Gaining access: This phase involves exploiting vulnerabilities to enter a system. Shodan helps gather information, but it doesn't directly assist in exploiting or gaining access. D. Persistence: Persistence involves maintaining access to a system after an attack. Shodan is not used for this phase, as it is more of an information-gathering tool.

it's a search engine, so recon phase