GPEN · Question #204
Which of the following is NOT an example of passive footprinting?
The correct answer is A. Scanning ports.. Port scanning is an active footprinting technique because it sends packets directly to the target system, unlike passive techniques that rely solely on publicly available information without touching the target.
Question
Which of the following is NOT an example of passive footprinting?
Options
- AScanning ports.
- BAnalyzing job requirements.
- CQuerying the search engine.
- DPerforming the whois query.
How the community answered
(47 responses)- A72% (34)
- B4% (2)
- C9% (4)
- D15% (7)
Why each option
Port scanning is an active footprinting technique because it sends packets directly to the target system, unlike passive techniques that rely solely on publicly available information without touching the target.
Scanning ports requires establishing direct network communication with the target host to probe for open services and running applications. This direct interaction makes it an active footprinting method that can be detected or logged by the target, distinguishing it from passive methods that never contact the target system.
Analyzing job postings is passive footprinting because the attacker reads publicly available information without interacting with or contacting the target organization's systems.
Querying search engines is passive footprinting because it retrieves publicly indexed information from a third-party service, never sending any traffic to the target.
Performing a WHOIS query is passive footprinting because it queries a public registration database maintained by a registrar, not the target system itself.
Concept tested: Distinguishing passive versus active footprinting techniques
Topics
Community Discussion
No community discussion yet for this question.