GCFA · Question #301
Which of the following is NOT an example of passive footprinting?
The correct answer is C. Scanning ports. Passive footprinting gathers information without directly interacting with the target; port scanning actively sends probes to the target, making it an active technique.
Question
Which of the following is NOT an example of passive footprinting?
Options
- AQuerying the search engine.
- BAnalyzing job requirements.
- CScanning ports.
- DPerforming the whois query.
How the community answered
(28 responses)- A18% (5)
- B7% (2)
- C71% (20)
- D4% (1)
Why each option
Passive footprinting gathers information without directly interacting with the target; port scanning actively sends probes to the target, making it an active technique.
Querying a search engine retrieves publicly indexed information without any direct contact with the target system, which is a classic passive footprinting technique.
Analyzing job postings is a passive technique that extracts clues about a target's technology stack and infrastructure from publicly available recruitment data.
Port scanning directly transmits network packets to the target system to enumerate open ports and running services, constituting active footprinting. Active footprinting involves direct interaction with the target, which can leave traces in logs and trigger intrusion detection systems, unlike passive methods that rely solely on publicly available information.
A WHOIS query retrieves publicly registered domain and IP ownership data from public registrar databases without directly probing or interacting with the target.
Concept tested: Active vs. passive footprinting reconnaissance techniques
Source: https://www.eccouncil.org/cybersecurity-exchange/ethical-hacking/what-is-footprinting/
Topics
Community Discussion
No community discussion yet for this question.