nerdexam
GIAC

GCFA · Question #208

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

The correct answer is A. Netcraft. Passive footprinting collects target information without directly interacting with the target system; Netcraft is a purpose-built passive reconnaissance tool that queries its own internet survey database to profile web servers.

Threat Hunting & Timeline Analysis

Question

You want to perform passive footprinting against we-are-secure Inc. Web server. Which of the following tools will you use?

Options

  • ANetcraft
  • BEttercap
  • CEthereal
  • DNmap

How the community answered

(25 responses)
  • A
    84% (21)
  • B
    8% (2)
  • C
    4% (1)
  • D
    4% (1)

Why each option

Passive footprinting collects target information without directly interacting with the target system; Netcraft is a purpose-built passive reconnaissance tool that queries its own internet survey database to profile web servers.

ANetcraftCorrect

Netcraft performs passive footprinting by retrieving web server information - such as hosting history, operating system, server software, and uptime - from its own continuously updated internet survey database rather than probing the target directly. This makes it ideal for passive reconnaissance because no packets are sent to the target organization's infrastructure.

BEttercap

Ettercap is an active network interception and man-in-the-middle attack tool used for sniffing live network traffic, not a passive web server footprinting tool.

CEthereal

Ethereal (now Wireshark) is a packet capture and protocol analysis tool that requires active presence on a network segment to capture traffic, making it an active technique rather than passive footprinting.

DNmap

Nmap is an active scanning tool that sends probe packets directly to the target's IP address or domain to enumerate open ports and services, which does not qualify as passive footprinting.

Concept tested: Passive web server footprinting using Netcraft

Source: https://www.netcraft.com/internet-data-mining/

Topics

#passive footprinting#Netcraft#reconnaissance#web server

Community Discussion

No community discussion yet for this question.

Full GCFA Practice