nerdexam
GIAC

GCFA · Question #301

Which of the following is NOT an example of passive footprinting?

The correct answer is C. Scanning ports. Passive footprinting gathers information without directly interacting with the target; port scanning actively sends probes to the target, making it an active technique.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following is NOT an example of passive footprinting?

Options

  • AQuerying the search engine.
  • BAnalyzing job requirements.
  • CScanning ports.
  • DPerforming the whois query.

How the community answered

(28 responses)
  • A
    18% (5)
  • B
    7% (2)
  • C
    71% (20)
  • D
    4% (1)

Why each option

Passive footprinting gathers information without directly interacting with the target; port scanning actively sends probes to the target, making it an active technique.

AQuerying the search engine.

Querying a search engine retrieves publicly indexed information without any direct contact with the target system, which is a classic passive footprinting technique.

BAnalyzing job requirements.

Analyzing job postings is a passive technique that extracts clues about a target's technology stack and infrastructure from publicly available recruitment data.

CScanning ports.Correct

Port scanning directly transmits network packets to the target system to enumerate open ports and running services, constituting active footprinting. Active footprinting involves direct interaction with the target, which can leave traces in logs and trigger intrusion detection systems, unlike passive methods that rely solely on publicly available information.

DPerforming the whois query.

A WHOIS query retrieves publicly registered domain and IP ownership data from public registrar databases without directly probing or interacting with the target.

Concept tested: Active vs. passive footprinting reconnaissance techniques

Source: https://www.eccouncil.org/cybersecurity-exchange/ethical-hacking/what-is-footprinting/

Topics

#passive footprinting#active reconnaissance#port scanning#OSINT

Community Discussion

No community discussion yet for this question.

Full GCFA Practice