312-50V10 · Question #537
Passive reconnaissance involves collecting information through which of the following?
The correct answer is D. Publicly accessible sources. Passive reconnaissance collects information about a target without directly interacting with it, relying entirely on publicly accessible sources.
Question
Passive reconnaissance involves collecting information through which of the following?
Options
- ASocial engineering
- BNetwork traffic sniffing
- CMan in the middle attacks
- DPublicly accessible sources
How the community answered
(54 responses)- A7% (4)
- B4% (2)
- C2% (1)
- D87% (47)
Why each option
Passive reconnaissance collects information about a target without directly interacting with it, relying entirely on publicly accessible sources.
Social engineering requires direct human-to-human interaction with target personnel to manipulate them into revealing information, making it an active technique.
Network traffic sniffing requires physical or logical access to the target network and involves capturing live traffic, which constitutes direct interaction with the target environment.
Man-in-the-middle attacks require actively intercepting and relaying communications between two parties, which is an offensive active technique rather than passive information gathering.
Passive reconnaissance uses publicly available sources such as WHOIS records, DNS lookups, search engines, social media, and job postings to gather target intelligence without ever directly contacting or sending packets to the target system. This approach avoids detection because no traffic is generated against the target.
Concept tested: Passive reconnaissance using open-source public information
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
Topics
Community Discussion
No community discussion yet for this question.