nerdexam
GIAC

GPEN · Question #204

Which of the following is NOT an example of passive footprinting?

The correct answer is A. Scanning ports.. Port scanning is an active footprinting technique because it sends packets directly to the target system, unlike passive techniques that rely solely on publicly available information without touching the target.

Penetration Testing Foundations & Reconnaissance

Question

Which of the following is NOT an example of passive footprinting?

Options

  • AScanning ports.
  • BAnalyzing job requirements.
  • CQuerying the search engine.
  • DPerforming the whois query.

How the community answered

(47 responses)
  • A
    72% (34)
  • B
    4% (2)
  • C
    9% (4)
  • D
    15% (7)

Why each option

Port scanning is an active footprinting technique because it sends packets directly to the target system, unlike passive techniques that rely solely on publicly available information without touching the target.

AScanning ports.Correct

Scanning ports requires establishing direct network communication with the target host to probe for open services and running applications. This direct interaction makes it an active footprinting method that can be detected or logged by the target, distinguishing it from passive methods that never contact the target system.

BAnalyzing job requirements.

Analyzing job postings is passive footprinting because the attacker reads publicly available information without interacting with or contacting the target organization's systems.

CQuerying the search engine.

Querying search engines is passive footprinting because it retrieves publicly indexed information from a third-party service, never sending any traffic to the target.

DPerforming the whois query.

Performing a WHOIS query is passive footprinting because it queries a public registration database maintained by a registrar, not the target system itself.

Concept tested: Distinguishing passive versus active footprinting techniques

Topics

#passive footprinting#active reconnaissance#port scanning#OSINT

Community Discussion

No community discussion yet for this question.

Full GPEN Practice