312-49 · Question #405
You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and…
The correct answer is C. Netcraft. Passive footprinting means gathering information about a target without directly interacting with their systems, so no traffic is generated that could trigger IDS/IPS alerts. Netcraft is a web-based reconnaissance service that provides data (web server software, hosting…
Question
You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and found very little information. You do not want to set off any alarms on their network, so you plan on performing passive footprinting against their Web servers. What tool should you use?
Options
- ADig
- BPing sweep
- CNetcraft
- DNmap
How the community answered
(59 responses)- A7% (4)
- B3% (2)
- C88% (52)
- D2% (1)
Explanation
Passive footprinting means gathering information about a target without directly interacting with their systems, so no traffic is generated that could trigger IDS/IPS alerts. Netcraft is a web-based reconnaissance service that provides data (web server software, hosting history, OS, uptime) gathered from its own crawls - you query Netcraft, not the target directly. Dig (A), Ping sweep (B), and Nmap (D) all generate direct network traffic to the target, making them active techniques that could be logged and detected.
Topics
Community Discussion
No community discussion yet for this question.