nerdexam
(ISC)2

CSSLP · Question #312

John works as a professional Ethical Hacker. He is assigned a project to test the security of you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of the fol

The correct answer is D. P0f. P0f is a widely used tool for passive OS fingerprinting, enabling the identification of operating systems and other device characteristics without actively sending probes.

Secure Software Testing

Question

John works as a professional Ethical Hacker. He is assigned a project to test the security of you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of the following tools can you use to accomplish the task?

Options

  • ASuperscan
  • BNBTscan
  • CNmap
  • DP0f

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • D
    90% (28)

Why each option

P0f is a widely used tool for passive OS fingerprinting, enabling the identification of operating systems and other device characteristics without actively sending probes.

ASuperscan

Superscan is a port scanner and network utility for Windows, used for active scanning rather than passive OS fingerprinting.

BNBTscan

NBTscan is a tool for scanning NetBIOS name servers and retrieving NetBIOS information, which is an active scan and not passive OS fingerprinting.

CNmap

Nmap (Network Mapper) can perform OS fingerprinting, but it primarily does so actively by sending specially crafted packets, rather than passively observing traffic.

DP0fCorrect

P0f (passive OS fingerprinting) is specifically designed to passively identify the operating system, firewall, and other characteristics of a remote host by analyzing network traffic without sending any packets itself.

Concept tested: Passive OS fingerprinting tools

Source: https://lcamtuf.coredump.cx/p0f3/

Topics

#Passive OS fingerprinting#Information gathering#Security testing tools#P0f

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice