nerdexam
EC-Council

312-50V10 · Question #537

Passive reconnaissance involves collecting information through which of the following?

The correct answer is D. Publicly accessible sources. Passive reconnaissance collects information about a target without directly interacting with it, relying entirely on publicly accessible sources.

Footprinting and Reconnaissance

Question

Passive reconnaissance involves collecting information through which of the following?

Options

  • ASocial engineering
  • BNetwork traffic sniffing
  • CMan in the middle attacks
  • DPublicly accessible sources

How the community answered

(54 responses)
  • A
    7% (4)
  • B
    4% (2)
  • C
    2% (1)
  • D
    87% (47)

Why each option

Passive reconnaissance collects information about a target without directly interacting with it, relying entirely on publicly accessible sources.

ASocial engineering

Social engineering requires direct human-to-human interaction with target personnel to manipulate them into revealing information, making it an active technique.

BNetwork traffic sniffing

Network traffic sniffing requires physical or logical access to the target network and involves capturing live traffic, which constitutes direct interaction with the target environment.

CMan in the middle attacks

Man-in-the-middle attacks require actively intercepting and relaying communications between two parties, which is an offensive active technique rather than passive information gathering.

DPublicly accessible sourcesCorrect

Passive reconnaissance uses publicly available sources such as WHOIS records, DNS lookups, search engines, social media, and job postings to gather target intelligence without ever directly contacting or sending packets to the target system. This approach avoids detection because no traffic is generated against the target.

Concept tested: Passive reconnaissance using open-source public information

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf

Topics

#passive reconnaissance#OSINT#publicly accessible sources#information gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice